Try using port 3268 (or port 3269 for ldaps). It's some stupid thing with AD global catalog or something like that. I can't remember all the details, but I think that should solve your problem. , Josh. > -----Original Message----- > From: empty body [mailto:emptybody@xxxxxxxxx] > Sent: Sunday, June 18, 2006 1:34 PM > To: users@xxxxxxxxxxxxxxxx > Subject: [users@httpd] Re: authentication problem with > apache2 + ldap + active directory > > trying a few more things: > > compiled apache 2.2.2 with Sun Microsystems Inc. LDAP SDK > that came with solaris: > > $ pkginfo -l SUNWlldap > PKGINST: SUNWlldap > NAME: LDAP Libraries > CATEGORY: system > ARCH: sparc > VERSION: 11.8.0,REV=2000.01.08.18.12 > BASEDIR: / > VENDOR: Sun Microsystems, Inc. > DESC: Ldap libraries in for software development of > dynamically linked executables > PSTAMP: on28-patch20040428123135 > INSTDATE: Aug 06 2004 06:00 > > apache behavior is the same - if i do not bind to the root > directly, but provide OU, then it works. if i do not provide > OU, it seems to get into a loop when it searches for the > sAMAccountName, gets a result with a reference, searches the > reference, unbinds, and then repeats the whole thing (i have > network traces to confirm this). changing values of > AuthLDAPDereferenceAliases has no effect on this behavior. > > any suggestions? i think i am about ready to file a > bug/enhancement report for ldap + active directory. > > thank you. > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP > Server Project. > See <URL:http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|