Apache LDAP auth: denied all time
Posted
by
Dmytro
on Server Fault
See other posts from Server Fault
or by Dmytro
Published on 2012-09-25T14:54:18Z
Indexed on
2012/09/25
15:39 UTC
Read the original article
Hit count: 403
There is my config (httpd 2.4):
<AuthnProviderAlias ldap zzzldap>
LDAPReferrals Off
AuthLDAPURL "ldaps://ldap.zzz.com:636/o=zzz.com?uid?sub?(objectClass=*)"
AuthLDAPBindDN "uid=zzz,ou=Applications,o=zzz.com"
AuthLDAPBindPassword "zzz"
</AuthnProviderAlias>
<Location /svn>
DAV svn
SVNParentPath /DATA/svn
AuthType Basic
AuthName "Subversion repositories"
SSLRequireSSL
AuthBasicProvider zzzldap
<RequireAll>
Require valid-user
Require ldap-attribute employeeNumber=12345
Require ldap-group cn=yyy,ou=Groups,o=zzz.com
</RequireAll>
</Location>
The Require valid-user
is work. But ldap-attribite, ldap-filter, ldap-group does not work - denied
in logs all time. I spent a lot of time but can't understand what's going on.
This is the example of my logs:
[Tue Sep 25 16:42:26.772006 2012] [authz_core:debug] [pid 23087:tid 139684003014400] mod_authz_core.c(802): [client 1.1.1.1:52624] AH01626: authorization result of Require valid-user : granted
[Tue Sep 25 16:42:26.772014 2012] [authz_core:debug] [pid 23087:tid 139684003014400] mod_authz_core.c(802): [client 1.1.1.1:52624] AH01626: authorization result of Require ldap-attribute employeeNumber=12345: denied
I checked all info with ldapsearch: there is a valid username, employee ID and other...
© Server Fault or respective owner