LDAP with Windows AD - Apache 2.2.4

Discussion in 'Apache' started by epr1977, Feb 7, 2007.

  1. #1
    Hello everyone,

    I'm trying to configure LDAP security for certain folders on my apache webserver. At this time I'm testing on my Windows XP machine.

    I was able to load the "authnz_ldap_module" module on apache. The problem that i'm having is that after getting the "logon" window to verify my credentials, I cannot log in successfuly. Even if I use the domain admin account. I will show some segments of my httpd.conf file.

    Some of the information of my server was change for this post (Dark green color)


    httpd.conf file:

    .........
    ......
    # Here is were i added my required modules, in order to use
    # LDAP
    LoadModule ldap_module modules/mod_ldap.so
    LoadModule authnz_ldap_module modules/mod_authnz_ldap.so
    .....
    .....
    .....
    #This is my 'restricted' directory
    #-------------------------------------------------------
    <Directory "C:/Program Files/Apache Software Foundation/Apache2.2/htdocs/mytestfolder">
    Options ExecCGI
    Options FollowSymLinks Includes
    AllowOverride None
    Allow from All

    AuthType Basic
    AuthName myfakeName
    AuthBasicProvider ldap
    AuthzLDAPAuthoritative OFF
    AuthLDAPBindDN cn=myfakeuser,DC=myfakedomain,DC=k12,DC=ca,DC=us
    AuthLDAPBindPassword myfakepassword
    AuthLDAPURL ldap://myfakehost.myfakedomain.k12.ca.us:389/DC=myfakedomain,DC=k12,DC=ca,DC=us?cn?
    require valid-user
    </Directory>
    #--------------------------------------------------------
    #end of my configuration
    .......
    .......


    End of httpd.conf

    This is part of the error log on Apache:


    [Tue Feb 06 16:23:57 2007] [warn] [client 127.0.0.1] [2820] auth_ldap authenticate: user myfakeuser authentication failed; URI /mytestfolder [LDAP: ldap_simple_bind_s() failed][Invalid Credentials]
    [Tue Feb 06 16:23:57 2007] [error] [client 127.0.0.1] user myfakeuser: authentication failure for "/mytestfolder": Password Mismatch




    Thanks in advance for your help and replies....
     
    epr1977, Feb 7, 2007 IP