[Auth_ldap] Novell and mod_ldap - User is not unique (search found two or more matches)

Fábio Coelho fabio.coelho at jfsc.gov.br
Mon Dec 18 08:32:25 PST 2006


Hi dears

My Name is Fábio Coelho, I'am a brazilian Linux admin.

I'm trying to configure Apache to authenticate against Novell Ldap, and 
I did a ldapsearch from the console, with the filter 
&(cn=qlx)(!(objetClass=aliasObject)):

administrativo:/opt/personalizados # ldapsearch -h ldap.jfsc.gov.br -x 
-b o=jfsc -s sub '(&(cn=qlx)(!(objectClass=aliasObject)))' objectClass
# extended LDIF
#
# LDAPv3
# base <o=jfsc> with scope subtree
# filter: (&(cn=qlx)(!(objectClass=aliasObject)))
# requesting: objectClass
#

# QLX, NINF, FLP, JFSC
dn: cn=QLX,ou=NINF,ou=FLP,o=JFSC
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: Person
objectClass: ndsLoginProperties
objectClass: Top
objectClass: qmailUser

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1

One entrie, but for apache are two, using the same filter:
    <Directory "/srv/www/newdesenv/htdocs/">
        AuthName "Autenticacao LDAP"
        AuthType Basic
        AuthBasicProvider ldap
        AuthLDAPRemoteUserIsDN on
        AuthLDAPURL 
ldap://ldap.jfsc.gov.br/o=JFSC?cn?sub?(!(objectClass=aliasObject))
        Require valid-user
        Options Indexes FollowSymLinks
        AllowOverride None
        Order allow,deny
        Allow from all
    </Directory>

result in the error

[Mon Dec 18 12:52:54 2006] [warn] [client 10.5.3.92] [7194] auth_ldap 
authenticate: user qlx authentication failed; URI /info.php [User is not 
unique (search found two or more matches)][No such object]

It is a bug or a characteristic? How can i circunvent this?

Thank you for the atention

Fábio Coelho



More information about the Auth_ldap mailing list