To share my "load order" trials & errors, at least on OS-X 10.3.9 w/ apache 2.0.54, configured with built in ldap, & mod_auth_mysql version 3 from sourceforge not only is the following load order necessary but the order of the directory directives which call these modules are equally important: mod_access.so mod_auth_mysql.so mod_auth.so mod_ldap.so mod_auth_ldap.so To protect a realm with a "fail-through" from ladp to mysql: <directory /ldap_then_mysql_secured> blah blah blah mod_auth_ldap directives AuthLDAPAuthoritative off require valid user mod_auth_mysql directives AuthLDAPAuthoritative on require group students </directory> To protect a realm with ldap alone: </directory /ldap_secured> blah blah blah mod_auth_mysql directives AuthMySQLEnable off [IMPORTANT] require group instructors mod_auth_ldap directives AuthLDAPAuthoritative on require valid-user </directory> To protect a mysql realm: <directory /mysql_secured> blah blah blah mod_auth_mysql directives AuthMySQLAuthoritative on require group parents </directory> The realm protected by mysql alone is pretty straight forward. However, the realm protected by ldap alone took lots of experimenting to derive. It appears that the realm needs a "place holder" containing mod_auth_mysql directives. Note the realm protected by ldap followed by mysql. If I wanted to first protect with mysql then by ldap I would have to change the module load order. As mentioned several times before in the group, module load order is for the most part unimportant in apache2 except for a few [those which i need to use :)]. I worked out the above guided by setting the error level to debug in httpd.conf. -bill > We are talking about Apache 2.0 here. There is no correlation between the > order in which the LoadModule directives appear, and the order in which > they are executed like there was in Apache 1.x. Apache 2.0 determines the > order in which the modules are to be executed itself based on the way the > handlers are registered, irrespective of whether they are statically or > dynamically linked. > > If you state exactly what your problem is, like what modules you are > having problems with and the symptoms, someone may be able to give you a > hint. > > -ascs > > -----Original Message----- > From: Lars Ohlén [mailto:lars@xxxxxxxx] > Sent: Wednesday, November 16, 2005 10:15 PM > To: users@xxxxxxxxxxxxxxxx > Subject: Re: [users@httpd] Apache 2.0.54: Loadorder of dynamic and static > modules > > How can you be so sure? > The modules works as expected when they are not loaded togheter! > And the behavour can see is exactly what should happen if the processing > order is incorrect. > > Lars > > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server Project. > See <URL:http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|