Re: LDAP: ldap_set_option failed. Could not set LDAP_OPT_X_TLS to LDAP_OPT_X_TLS_HARD

Sandro Tosi <sandro.tosi@xxxxxxxxxxx> · Wed, 04 Nov 2009 16:19:34 +0100

Eric Covener wrote:

On Wed, Nov 4, 2009 at 9:45 AM, Sandro Tosi <sandro.tosi@xxxxxxxxxxx> wrote:

Sandro Tosi wrote:

Hello,
we are enabling LDAP auth on our apache stack. Starting from
apache/2.2.9+php/5.2.8 we are upgrading to apache/2.2.14+php/5.2.11 .

Just to give more information in order to (hopefully) solve this, the same
problem happens also using apache 2.2.9 (recompiled to enable ldap and
authnz_ldap).

Any chance your PHP is causing some other LDAP library to be loaded?
Same symptom without mod_php?

Oh god you're right! removing the load of php from apache (and 

commenting almost every virtualhost than default), LDAP auth is working!!

Now, running

# ldd modules/libphp5.so | egrep "ldap|ssl|sas"
       libssl.so.0 => /usr/X11R6/lib/libssl.so.0 (0xb725d000)

and

# ldd modules/mod_ldap.so | egrep "ldap|ssl|sas"
       libldap-2.3.so.0 => /usr/lib/libldap-2.3.so.0 (0xb804b000)
       libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0xb7eb1000)
       libssl.so.0 => /usr/lib/libssl.so.0 (0xb7e71000)

could the problem be the different libssl (and I really don't know why 

they're different)? in particular because libphp is loaded _before_ 

mod_ldap ?

Regards,
Sandro

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx