Hi DeckRider,
I use this configuration with 2.2.6:
AuthType Basic
AuthName "LDAP and HTPass"
AuthBasicProvider file ldap
AuthUserFile /path/to/htpassword/file
AuthLDAPBindDN cn=foo,dn=example,dn=com
AuthLDAPBindPassword bleep
AuthLDAPURL "ldaps://ldap.example.com?uid?sub?(objectClass=eduPerson)"
AuthzLDAPAuthoritative off
Require valid-user
Matt
----- Original Message -----
From: "deckrider" <deckrider@xxxxxxxxx>
To: users@xxxxxxxxxxxxxxxx
Sent: Tuesday, February 5, 2008 5:38:39 PM GMT -06:00 US/Canada Central
Subject: BOTH ldap AND htpasswd/file authentication (apache httpd 2.2.6)
Hello,
I'm using apache httpd 2.2.6 on Solaris (for Subversion).
My trouble is trying to supplement ldap authentication with a few
htpasswd entries. I can get each working separately, but not together
(it appears to occasionally work, but mostly causes hanging).
Works:
AuthType Basic
AuthName "Foo / Bar (https://foo.bar.com/)"
AuthBasicProvider ldap
AuthLDAPURL ldaps://foo.bar.com:2636/o=corp?corpLHS?sub?(objectclass=corpPerson)
<LimitExcept GET PROPFIND OPTIONS REPORT>
Require ldap-user jsmith jdoe
</LimitExcept>
Works:
AuthType Basic
AuthName "Foo / Bar (https://foo.bar.com/)"
AuthBasicProvider file
AuthUserFile /opt/apache2/etc/passwd
<LimitExcept GET PROPFIND OPTIONS REPORT>
Require user autobuild
</LimitExcept>
Does NOT Work:
AuthType Basic
AuthName "Foo / Bar (https://foo.bar.com/)"
AuthBasicProvider file ldap
AuthUserFile /opt/apache2/etc/passwd
AuthLDAPURL ldaps://foo.bar.com:2636/o=corp?corpLHS?sub?(objectclass=corpPerson)
<LimitExcept GET PROPFIND OPTIONS REPORT>
Require user autobuild
Require ldap-user jsmith jdoe
</LimitExcept>
I've also tried various combinations of the following (which I don't
really understand):
AuthzUserAuthoritative Off/On
AuthzLDAPAuthoritative Off/On
Is it possible that this is a bug that is fixed in some other version
of apache httpd? Am I just clueless?
Thanks in advance!
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|