Re: problem with mod_authnz_ldap with AD

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Oct 26, 2007 at 03:12:59PM -0400, David Nalley wrote:
> In capturing the packets I see that it binds successfully several times and 
> then tries to authenticate. The AD box returns:
> LDAPMessage searchResDone(5) operationsError (00000000: LdapErr: 
> DSID-0C090627, comment: In order to perform this operation a successful bind 
> must be completed on the connection., data 0, vece) [0 results]
> 
> None of the binds that occur in the capture failed though. (all the bind 
> responses reported success) 

I've seen this far too often when connecting new services to ADS.  It
means that a null bind was done.  ADS accepts null binds but grants
them no access to anything.  You need an authenticated bind to
actually execute operations successfully.

I don't see why httpd should be doing anonymous binds, given the
configuration snippet you posted, but that is what I would go looking for.

-- 
Mark H. Wood, Lead System Programmer   mwood@xxxxxxxxx
Typically when a software vendor says that a product is "intuitive" he
means the exact opposite.

Attachment: pgpP6hNCxyPpp.pgp
Description: PGP signature


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux