Questions tagged [mod-auth-ldap]
The mod-auth-ldap tag has no usage guidance.
40
questions
0
votes
1
answer
480
views
Apache - Active Directory LDAP authorization
I'm running Apache 2.4 on Fedora 34.
I've configured user authorization based on Active Directory usernames and passwords with "ldap_module" and "authnz_ldap_module" and this entry ...
- 21
0
votes
0
answers
278
views
Is it possible to verify TLS if a server doesn't provide an issuer cert?
I'm trying to configure Apache httpd v2.4 for LDAP authentication to AD. LDAPS certificates are issued by the internal CA. For whatever reason (I'm not on the AD team), neither our prod or non-prod ...
1
vote
0
answers
88
views
Configuring Cert Based and LDAP Authorization in Apache Virtual Host
We have a scenario where we have an application that only accept client certs for authentication and that setup works well (configured in Apache VHost). However as part new requirement we would like ...
- 11
0
votes
1
answer
719
views
HTTPD LDAP Authentication not working
First time trying to do this and I'm completely lost.
I have a Oracle Linux 7.9 server that has a directory that needs to be shared to users via HTTP so that they can download files to send out to ...
- 1
0
votes
1
answer
313
views
How to plug Apache to several ldap servers with mod_authnz_ldap?
The apache mod_authnz_ldap AuthLDAPURL directive can have several ldap URIs as showed in the doc:
AuthLDAPURL "ldap://ldap1.example.com ldap2.example.com/dc=..."
However, if I need ...
- 175
0
votes
1
answer
14k
views
Vlan manager does not automatically disable macs
I want to implement a client infrastructure where the devices connect to the network in different vlan.
I installed a freeradius server connected to our Active Directory. I have enabled the switches ...
- 1
1
vote
1
answer
2k
views
mod_authnz_ldap: Using userPrincipalName and sAMAccountName with AuthzSVNAccessFile
this is my first post here, so please be kind with me ...
We have apache managing access for our subversion server. Currently users can only log in with their sAMAccountName, but since ...
- 141
1
vote
3
answers
2k
views
LDAPTrustedClientCert not allowed here
I am trying to configure ldaps authentication on a CentOS 6.x server running Apache 2.2. I have successfully been using ldap authentication for a couple years, but need to get it to work over SSL. I ...
- 11
0
votes
1
answer
2k
views
Apache LDAP group authentication
I am running Apache 2.4.18 on Ubuntu 16.04.
I am trying to run a WebDAV site in Apache and authenticate users who are a member of a specific LDAP group. The LDAP server is FreeIPA although I do not ...
0
votes
1
answer
4k
views
DB_NOTFOUND: No matching key/data pair found (-30988)
Could anyone please explain why I get this error. I got this error(on server) while trying to bind any user in ldap server. Also I get "Insufficient access rights" output when I run the program. And I ...
- 101
0
votes
0
answers
101
views
hHow to authorize Apache's users similar to Microsoft IIS?
I want to enable directory browsing in Apache and ask users to authenticate using openLDAP backend, and I want to set different groups for the folders inside Apache's web server.
My goal is not to ...
- 207
0
votes
1
answer
2k
views
Intermittent issue - ldap_start_tls_s() failed, Connect error
We're getting intermittent errors of this nature:
[Mon Mar 20 08:38:37 2017] [info] [client client_ip_here] [27056] auth_ldap authenticate: user first.last@server.com authentication failed; URI /path/...
- 297
5
votes
1
answer
8k
views
Debugging a timeout with ldap auth on apache
I'm trying to debug a timeout problem I have with Apache, for some months now.
The pattern looks like this:
On every first request of a new session (or after some time after the last request) the ...
- 22.5k
6
votes
1
answer
18k
views
Apache user authentication based on LDAP group memberships not working
i would like to auhenticate and authorize all users of one LDAP group (ApacheDS 2.0.0-20 on Windows, using multiple uniqueMember attributes in the group and the "Require ldap-group" statement in httpd ...
- 61
1
vote
2
answers
546
views
LDAP Authentication with Apache
I am trying to setup LDAP authentication with apache.
Group Information:
ldapsearch -x -h ldap-corporate -b "o=example.com,c=us" "cn=Security "
dn: cn=Security , ou=lm8100, o=example.com, c=US
...
- 111
0
votes
2
answers
3k
views
Authenticate only group users in LDAP
I am trying to setup LDAP authentication.
Group Informatin:
ldapsearch -x -h ldap-corporate -b "o=example.com,c=us" "cn=Security "
# extended LDIF
#
# LDAPv3
# base <o=example.com,c=us> with ...
- 111
0
votes
1
answer
2k
views
Getting error when Integrating LDAP with Wordpress
I have installed Ldap on Ubuntu 14.04 and wordpress on amazon linux ami.
I'm able to login in ldap console. I have created a user in it.
On wordpress i have installed simpleLDAP plugin.
I don't know ...
4
votes
0
answers
1k
views
Apache 2.4 Redundant LDAP Authentication
I'm trying to provide a redundant LDAP authentication to my webserver.
ScriptAlias /nagios/cgi-bin "/usr/local/nagios/sbin"
<AuthnProviderAlias ldap ldap-one>
AuthLDAPBindDN "search@domain"
...
- 41
0
votes
5
answers
6k
views
Active Directory Multi Site. Choose nearest DCs into Linux/Not-Microsoft applications
i'm having a problem using ldap based on Active Directory in a multi-site environment.
Basically I have several different environments(sites) and each of them have its own dedicated couple of domain ...
- 11
3
votes
2
answers
1k
views
Can apache expose the ldap group used to authenticate to a php application?
I have a LAMP server setup using Apache2, mod_php, and mod_authnz_ldap to authenticate to Active Directory. This hosts a lightweight php application where users enter and manipulate data. Access is ...
0
votes
1
answer
954
views
Apache LDAP authorization
I am attempting to use mod_auth_cas for AuthN and LDAP for AuthZ. mod_cas_auth is actually irrelevant, because I have the same issue with BasicAuth for AuthN.
Everything works fine if I specify <...
- 165
3
votes
1
answer
5k
views
Apache Proxy & Basic Auth
Im trying to set up an Apache Proxy which also does LDAP Basic Auth:
<IfModule mod_ssl.c>
<VirtualHost _default_:443>
ServerAdmin webmaster@localhost
...
- 456
0
votes
0
answers
686
views
Apache 2.4 with multiple LDAP providers fails to authenticate
Running into a strange problem.
I have an apache site with (single) LDAP authentication that runs fine.
However, I need to add a second ldap server to it, so I'm using AuthnProviderAlias for that, ...
0
votes
1
answer
980
views
Apache 2.4 authentication combination with LDAP and htpassword
We use Apache with mod_svn to serve our Subversion repositories. Previously we used file based authentication with AuthType Digest set. We want to move to LDAP-based authentication, but at the first ...
3
votes
3
answers
5k
views
Authenticating Apache against multiple ldap groups
I'm using mod_authn_alias and mod_authnz_ldap against an Apache/2.2.14 (Ubuntu)
and I'm trying to configure ldap authentication against multiple domains.
My config is:
<AuthnProviderAlias ldap ...
- 31
2
votes
1
answer
18k
views
LDAP-based Apache auth (mod_ldap + mod_authnz_ldap) using own CA for SSL/TLS
SOLVED: Turned out problem was caused by forgotten legacy LDAPTrustedGlobalCert directives in various config files, using old certificate for the same FQDN
tl;dr: We uses a self-signed CA and we ...
- 242
5
votes
1
answer
5k
views
apache mod_authnz_ldap - 500 error when blank username used
I've got Apache 2.4 running on Windows Server 2012.
I've got mod_authnz_ldap working except if users put a blank username.
This results in a 500 internal server error.
this is the entry in httpd....
- 241
4
votes
1
answer
10k
views
More Searchfilters in AuthLDAPURL
Is it posible to have more then one searchfilter in AuthLDAPURL?
Example uid filter:
<Location /test/>
AuthType Basic
AuthName "Test"
AuthBasicProvider ldap
...
- 43
0
votes
1
answer
8k
views
LDAP Auth with checking the group user belongs to?
Here is the problem I want to solve.
We have a mercurial source control server (Linux + Apache + mod_auth), that I want to configure so it works against LDAP (right now it's basic authorization on ...
- 805
1
vote
1
answer
312
views
LDAP does not timeout when server is down
I am currently trying to add LDAP support to supplement a file auth system. Unfortunately, I can't just phase out the file system in it's entirety because of when the LDAP server goes down. The ...
4
votes
2
answers
7k
views
apache2 ldap authentication
For whatever reason, I am not able to include the following line in my httpd.conf:
AuthBasicProvider file ldap
I keep getting the following error:
Unknown Authn provider: ldap
Apache is ...
- 707
2
votes
2
answers
5k
views
Apache authentication from multiple domains in AD with mod_authn_alias
I'm running Apache 2 and I need to authentificate users from multiple AD domains in one <Location/>. I tried using mod_authn_alias
ОС: Debian GNU/Linux Squueze with lastest updates
Apache/2.2....
- 2,196
12
votes
3
answers
889
views
Dynamically Authenticate Apache with LDAP Based on Request String?
It is possible to use a portion of the request URI as an input into mod_authnz_ldap's Require ldap-group directive?
I'm trying to dynamically check access to a bunch of different project directories, ...
- 405
2
votes
1
answer
1k
views
Apache mod_auth_basic and Ordering
I have Apache setup to authenticate with active directory through ldap for my users. There are a few "system" users (for automated build tests) that are manually setup and authenticate through file.
...
- 133
1
vote
1
answer
6k
views
LDAP authentication apache 2.2
I am trying to install basic ldap authentication on a website on an apache 2.2 server. I put this in my /etc/apache2/apache2.conf file
LoadModule ldap_module /usr/lib/apache2/modules/mod_ldap.so
...
- 21
2
votes
3
answers
6k
views
Apache LDAP Auth idle-timeout
As part of the security policy we are upgrading out systems to comply with, I need to set our Apache LDAP Auth to have a idle-timeout of 15 minutes.
I.e. If the user stops using the system for over ...
- 621
0
votes
2
answers
566
views
Apache mod_auth_ldap and AD authentication using IE
I want to know if it's possible to configure Apache for authentication against ActiveDirectory for users to use SIngle Sign-on. I know Internet Explorer can use it and it's called Windows ...
- 454
2
votes
3
answers
6k
views
Apache LDAP Authentication: Can I bind the user without searching for the DN first?
When doing AuthType Basic authentication against an LDAP server, Apache first binds to search for the DN of the user, then binds with that DN to test the user's password. The challenge is that with AD,...
- 358
0
votes
2
answers
210
views
New to mod_auth_ldap and looking for help
Is there a way to configure mod_auth_ldap without modifying httpd.conf ? (ie. only using .htaccess files)
The reason I ask is that we are trying to setup a directory on our site to use ldap ...
- 419
3
votes
4
answers
6k
views
Apache LDAP authentication (mod_auth_ldap) on MacOS Server (10.5)
A - Is there a LDAP authentication module (mod_auth_ldap) for the version of Apache that comes built into MacOS Server 10.5?
(I'm pretty sure no, but maybe someone compiled one.)
B - If not, can it ...
- 260