The Problem:
My subversion has started to stop working periodically (every hour or two), this seems to have started when a domain controller failed ( I haven't done a metadata cleanup yet ). The one that failed though, is not the one specified in the AuthLDAPUrl directory.
My Questions:
Does anyone have any idea's what might be causing this, is it possible that the domain controller that auth_ldap contacts send a response telling auth_ldap to use the domain controller that is now gone?
Also, is there a way to dump all the ldap authentication passwords for the users in AuthzSVNAccessFile to a local file as a temporary workaround?
It looks like I am using the Global Catalog, port 3268, would I be better off using 636 or 389. What does it mean if I use one of those instead? Some of my other DC's are not listening on 3268 but are on those other ports, so maybe I could specify reduntant AuthLDAPUrls?
Reference Material:
Error Message:
[warn] [client 192.168.80.80]
[22364] auth_ldap authenticate: user aUserName authentication failed;
URI /svn/someRepo/trunk [LDAP: ldap_simple_bind_s() failed]
[Can't contact LDAP server]
auth_ldap configuration:
<Location /svn>
DAV svn
SVNParentPath /var/svn
AuthzSVNAccessFile /etc/httpd/authfiles/authz_svn_access
AuthType Basic
AuthBasicProvider ldap
AuthName "Company's Software Repository"
AuthLDAPBindDN "[email protected]"
AuthLDAPBindPassword "someSuperSecretPassword"
AuthLDAPUrl "ldap://pdc.myDomain.com:3268/dc=myDomain,dc=com?samAccountName?sub?(objectCategory=person)(objectClass=User)"
Require valid-user
</Location>