Re: [users@httpd] mod_auth_ldap mod_auth_mysql on OS-X

[William Paredes <paredes@xxxxxxxxxxxx>]

Hi!

Moving the mod_auth_mysql module before the mod_auth_ldap does give 
mysql priority, however the reverse problem happens. That is, when a 
user exists in both databases with different passwords, now 
mod_auth_mysql refuses to 'decline'.

I've systematically swapped the load order of mod_auth_mysql, 
mod_access, mod_auth, mod_ldap & mod_auth_ldap using all possible 
combinations, restarting the server and reloading the browser [flushing 
the cache] each time with the result being that one module always 
refuses to decline when a user exists in both databases.

-bill

httpd2@xxxxxxxxxxxx wrote:

> Hi Wiliam. I've been reading up on modules and 
> authentication.
>
> You may need to move the LDAP module so it comes after the 
> mysql_auth module, as each module is tested in reverse 
> order, i.e. last loaded module is higher priority and comes 
> first in the pecking order.
>
> Accordingly, the way you have your modules listed, mysql 
> will have priority over the LDAP module. mod_access having 
> the lowest priority and being checked last, cause it's 
> first in the LoadModule listing.
>
> On Fri, 3 Feb 2006, William Paredes wrote:
>
>  
>
> > To: users@xxxxxxxxxxxxxxxx
> > From: William Paredes <paredes@xxxxxxxxxxxx>
> > Subject: Re: [users@httpd] mod_auth_ldap mod_auth_mysql on OS-X
> >
> > Greetings!
> >
> > Using these modules
> > -------------------
> > LoadModule access_module modules/mod_access.so
> >
> > LoadModule auth_module modules/mod_auth.so
> > LoadModule ldap_module modules/mod_ldap.so
> > LoadModule auth_ldap_module modules/mod_auth_ldap.so
> >
> > LoadModule mysql_auth_module  modules/mod_auth_mysql.so
> >    
>
> Arrange these modules in reverse order with the last 
> mentioned module having highest checking priority, and the 
> module first in the list has lowest priority, i.e. is tested 
> last.
>
> Keith
>
> In theory, theory and practice are the same;
> In practice they are not. 
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>
>  


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx