Well, I managed to get authentication working, but not by using require
valid-user. If I change it from valid user to ldap-user and
specify a user, that works, however it is a bit cumbersome. I can also
get it to work more to my liking if I change the require statement to,
say:
require ldap-attribute objectClass=shadowAccount
For my purposes this will suit me, but I still find it irritating that
I couldn't (for whatever reason) get it to work with valid-user.
Ed Zaborowski wrote:
Hello,
I've been using Apache for some time, and recently ran into an issue
that is causing me to pull my hair out.
I have set up a server, well more specifically a Location, to utilize
LDAP Authentication. However, when I surf to the URL, I am prompted
time and time again, with seemingly no end, when I use correct
credentials, with no information in the error_logs. When I using an
incorrect password, I get the message: user ed:
authentication failure for "/svn": Password Mismatch
I've tried using just file authentication, and that works
fine,
however, I prefer not to go that route. I've also removed the limit
directives (as well as the authentication directives), and I was
allowed unfettered access to the directory, as I would expect, with no
errors.
I am really at a loss, and I've tried everything I can think of,
multiple times. If anyone has any ideas as to what I am doing wrong,
and/or how to fix it, I'd really appreciate the help. Please see below
for my config excerpts.
Thanks,
--Z
Piece of my httpd.conf:
<Location /svn>
DAV svn
SVNPath /subversion/project
<Limit GET PROPFIND PUT POST DELETE PROPPATCH MKCOL
COPY MOVE LOCK UNLOCK>
AuthBasicProvider ldap
AuthType Basic
AuthName "Subversion Repository"
AuthLDAPURL
ldap://127.0.0.1/ou=mail,dc=mydomain,dc=net?uid?one?(objectClass=shadowAccount)
require valid-user
</Limit>
</Location>
The LDAP account I am using:
dn: uid=ed,ou=mail,dc=mydomain,dc=net
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: person
objectClass: qmailUser
objectClass: top
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
accountStatus: active
uid: ed
displayName: Edward Zaborowski
homeDirectory: /home/ed
uidNumber: 5000
gidNumber: 100
shadowLastChange: 13307
gecos: Edward Zaborowski,,,,
cn: Edward Zaborowski
sn: Zaborowski
givenName: Edward
loginShell: /bin/bash
|
