[Auth_ldap] Ldap issue with apache and AD windows 2k3

[Lubrano di Ciccone, Christophe (DEF)]

Hello,
I have a unix with apache 2.0 with the mod auth_ldap_mode. I have this .conf for the ldap request with some directives setup accordingly to my env. and the others ones not defined then the default vues are used. (see below)

It is working fine with 2000 native mode. I test my configuration with a 2003 domain and I cannot longer have the user (sAMAccountname) being authentified. GRR***

I made a capture using ethereal and I noticed that the user sAMAccountname is well authenticated, but when the require group is processed, the bind was a NULL one and and I get "This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required." in the browser on the client.

Does anybody have faced one day with such issue ?

Thanks a lot for your help
Christophe

<IfModule !mod_auth_ldap.c>
  LoadModule auth_ldap_module modules/auth_ldap.so
</IfModule>

<Location />
  AuthName "ZZZZZZZZZZ"
  AuthType Basic

  AuthLDAPURL ldap://DCGCwindows2003.xxx.yyy.com:389/dc=xxx,dc=yyy,dc=com?sAMAccountName
  AuthLDAPBindDN "CN=user,OU=Users,OU=AAA,DC=xxx,DC=yyy,DC=com"
  AuthLDAPBindPassword "therightpassword"

  require group CN=group,OU=Users,OU=AAA,DC=xxx,DC=yyy,DC=com