I've install fedora core 5 and try to cofigure httpd 2.2.
without SSL, it's ok with this conf:
LDAPTrustedGlobalCert CA_BASE64 /etc/httpd/conf/cert.pem
<Directory "/var/www/html">
AuthName "bienvenue"
AuthType Basic
AuthBasicProvider ldap
AuthLDAPURL ldap://*.*.*.*/dc=*,dc=*?uid?sub
AuthzLDAPAuthoritative off
require valid-user
</Directory>
Then I just replace ldap for ldaps, and after my first log (I haven't three
attempt ), I 'm redirected to this page:
Internal Server Error
The server encountered an internal error or misconfiguration and was unable
to complete your request.
Please contact the server administrator, root@localhost and inform them of
the time the error occurred, and anything you might have done that may have
caused the error.
More information about this error may be available in the server error log.
In httpd log I have: auth_ldap authenticate: user test authentication
failed; URI / [LDAP: ldap_simple_bind_s() failed][Can't contact LDAP server]
In fedora directory server log : SSL connection from 10.50.7.72 to
10.50.7.72
[15/Jun/2006:12:18:04 +0200] conn=308 SSL 256-bit AES
[15/Jun/2006:12:18:04 +0200] conn=308 op=-1 fd=68 closed - B1
I have to change an other thing than AuthLDAPURL for SSL???
From: "Graham Leggett" <minfrin@xxxxxxxx>
Reply-To: "General discussion list for the Fedora Directory server
project." <fedora-directory-users@xxxxxxxxxx>
To: "General discussion list for the Fedora Directory server project."
<fedora-directory-users@xxxxxxxxxx>
CC: fedora-directory-users@xxxxxxxxxx
Subject: Re: apache ldap over SSL.
Date: Mon, 12 Jun 2006 13:28:36 +0200 (SAST)
On Mon, June 12, 2006 12:18 pm, Mickael Besse wrote:
> Httpd v 2.0.53
Use the latest v2.2.x. The LDAP support in v2.0.x was experimental, and a
lot of rewriting and fixing happened that could not be easily backported
to v2.0. When v2.2.0 of httpd was finally released a while back, the LDAP
support was no longer experimental.
The v2.2.x httpd should work with SSL, I spent quite a bit of time trying
to bend my head around the different LDAP client toolkits to make sure
their SSL worked consistently for APR.
Regards,
Graham
--
--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users
_________________________________________________________________
Windows Live Mail : découvrez et testez la version bêta !
http://www.ideas.live.com/programpage.aspx?versionId=5d21c51a-b161-4314-9b0e-4911fb2b2e6d
--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users
