[Auth_ldap] require group

[Andy Rabagliati]

On Wed, 31 Aug 2005, Dave Carrigan wrote:

> Bump up logging in apache to Debug level and send the log here.
>

"denying authentication" .. Hmm. No wonder there was no Group lookup.

Rummaging in source now ..

James Bourne <jbourne at mtroyal.ca> suggested removing
AuthLDAPRemoteUserIsDN - that made no difference.

Cheers,  Andy!

[Thu Sep  1 08:34:03 2005] [notice] Accept mutex: sysvsem (Default: sysvsem)
[Thu Sep  1 08:34:22 2005] [debug] auth_ldap_config.c(66): version 1.6.0: Trying to parse an url `ldap:///ou=wizzy?uid?sub?objectClass=posixAccount'
[Thu Sep  1 08:34:22 2005] [debug] auth_ldap_config.c(87): Url parse: Host: (null)
[Thu Sep  1 08:34:22 2005] [debug] auth_ldap_config.c(89): Url parse: Port: 389
[Thu Sep  1 08:34:22 2005] [debug] auth_ldap_config.c(91): Url parse: DN: ou=wizzy
[Thu Sep  1 08:34:22 2005] [debug] auth_ldap_config.c(93): Url parse: Attrib: uid
[Thu Sep  1 08:34:22 2005] [debug] auth_ldap_config.c(95): Url parse: Scope: subtree
[Thu Sep  1 08:34:22 2005] [debug] auth_ldap_config.c(100): Url parse: Filter: objectClass=posixAccount
[Thu Sep  1 08:34:22 2005] [debug] auth_ldap_config.c(147): {3222} not requesting secure LDAP
[Thu Sep  1 08:34:22 2005] [debug] auth_ldap.c(480): [client 127.0.0.1] {3222} Entering ldap_authenticate_basic_user
[Thu Sep  1 08:34:22 2005] [debug] auth_ldap.c(306): [client 127.0.0.1] {3222} Entering auth_ldap_find_connection
[Thu Sep  1 08:34:22 2005] [debug] auth_ldap.c(498): [client 127.0.0.1] {3222} authenticate: using URL ldap:///ou=wizzy?uid?sub?objectClass=posixAccount
[Thu Sep  1 08:34:22 2005] [debug] auth_ldap.c(503): [client 127.0.0.1] {3222} authenticate: result is 401
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap_config.c(66): version 1.6.0: Trying to parse an url `ldap:///ou=wizzy?uid?sub?objectClass=posixAccount'
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap_config.c(87): Url parse: Host: (null)
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap_config.c(89): Url parse: Port: 389
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap_config.c(91): Url parse: DN: ou=wizzy
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap_config.c(93): Url parse: Attrib: uid
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap_config.c(95): Url parse: Scope: subtree
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap_config.c(100): Url parse: Filter: objectClass=posixAccount
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap_config.c(147): {3222} not requesting secure LDAP
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap.c(480): [client 127.0.0.1] {3222} Entering ldap_authenticate_basic_user
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap.c(306): [client 127.0.0.1] {3222} Entering auth_ldap_find_connection
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap.c(498): [client 127.0.0.1] {3222} authenticate: using URL ldap:///ou=wizzy?uid?sub?objectClass=posixAccount
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap.c(432): [client 127.0.0.1] {3222} inserting `ldap:///ou=wizzy?uid?sub?objectClass=posixAccount' into URL cache
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap.c(551): [client 127.0.0.1] {3222} entry for `fred' is not in the cache
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap.c(145): [client 127.0.0.1] {3222} Entering auth_ldap_connect_to_server
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap.c(165): [client 127.0.0.1] {3222} Opening connection to ldap server(s) `localhost'
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap.c(168): [client 127.0.0.1] {3222} LDAP OP: init
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap.c(262): [client 127.0.0.1] {3222} Binding to server `localhost' as (null)/(null)
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap.c(272): [client 127.0.0.1] {3222} LDAP OP: simple bind
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap.c(577): [client 127.0.0.1] {3222} Peforming a search (scope=2) with filter (&(objectClass=posixAccount)(uid=fred))
[Thu Sep  1 08:34:33 2005] [debug] auth_ldap.c(581): [client 127.0.0.1] {3222} LDAP OP: search
[Thu Sep  1 08:34:34 2005] [debug] auth_ldap.c(625): [client 127.0.0.1] {3222} DN returned from search is uid=fred,ou=People,dc=megabook,ou=wizzy
[Thu Sep  1 08:34:34 2005] [debug] auth_ldap.c(645): [client 127.0.0.1] {3222} Validating user `uid=fred,ou=People,dc=megabook,ou=wizzy' via bind
[Thu Sep  1 08:34:34 2005] [debug] auth_ldap.c(654): [client 127.0.0.1] {3222} LDAP OP: simple bind
[Thu Sep  1 08:34:34 2005] [debug] auth_ldap.c(675): [client 127.0.0.1] {3222} authenticate: accepting
[Thu Sep  1 08:34:34 2005] [debug] auth_ldap.c(678): [client 127.0.0.1] {3222} Adding user `uid=fred,ou=People,dc=megabook,ou=wizzy' to the cache
[Thu Sep  1 08:34:34 2005] [debug] auth_ldap.c(722): [client 127.0.0.1] {3222} Entering ldap_check_auth
[Thu Sep  1 08:34:34 2005] [debug] auth_ldap.c(906): [client 127.0.0.1] {3222} denying authentication