httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From John Adamski <adam...@graceland.edu>
Subject [users@httpd] can't get apache 2.2.22 and mod_ldap to work
Date Fri, 07 Sep 2012 13:43:46 GMT
HPUX 11.v3 OS running on HP BL870c Integrity server

I'm trying to get apache ldap to play nice together and not having much luck.  I compiled
apache with these options:

    --with-ldap-include=/opt/openldap/include/"
    --with-ldap-lib=/opt/openldap/lib/libldap_r.so"

    --enable-ldap=static"
    --enable-authnz-ldap=static"
    --with-ldap=ldap"

when upgrading from 2.2.15 to 2.2.22 on our dr/test epr server.  I can get apache to start
and serve up pages except those that require ldap authentication. I get this message in the
sslerror_log

[Tue Sep 04 12:58:51 2012] [error] LDAP: Could not set the connection timeout 

And the browser gets this message:

Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your
request.

Please contact the server administrator, webadmin@graceland.edu and inform them of the time
the error occurred, and anything you might have done that may have caused the error.

More information about this error may be available in the server error log.


--------------------------------------------------------------------------------

Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.1b mod_perl/2.0.5 Perl/v5.14.2 Server at newt.graceland.edu
Port 443

 
>From our config files we have these sections:



<IfModule mod_status.c>
    #
    # ExtendedStatus controls whether Apache will generate "full" status
    # information (ExtendedStatus On) or just basic information (ExtendedStatus
    # Off) when the "server-status" handler is called. The default is Off.
    #
    ExtendedStatus On

    #
    # Allow server status reports generated by mod_status,
    # with the URL of http://servername/server-status
    # Change the ".example.com" to match your domain to enable.
    #
    <Location /server-status>
        SetHandler server-status
        Order deny,allow
        Deny from all
        Allow from .graceland.edu
    </Location>
</IfModule>

<IfModule mod_info.c>
    #
    # Allow remote server configuration reports, with the URL of
    #  http://servername/server-info (requires that mod_info.c be loaded).
    # Change the ".example.com" to match your domain to enable.
    #
    <Location /server-info>
        SetHandler server-info
        Order deny,allow
        Deny from all
        Allow from .graceland.edu
    </Location>
</IfModule>


<Directory /opt/apache2/carsi-live/share/cgi-bin/hr>
  AllowOverride None
  Options None
  AuthType Basic
  AuthBasicProvider ldap
  AuthName "GU Employee Access"
  AuthLDAPBindDN "cn=ldapuser,cn=users,dc=graceland,dc=edu"
  AuthLDAPBindPassword grace1
  AuthLDAPURL ldap://dc02.graceland.edu:389/dc=graceland,dc=edu?SAMAccountName?sub?(objectclass=user)
  require ldap-group cn=users,cn=builtin,dc=graceland,dc=edu
</Directory>


I can do a ldapsearch with roughly the same settings and get information:

ldapsearch -b dc=graceland,dc=edu -h xxxx.graceland.edu -D "cn=xxxxxx,cn=users,dc=graceland,dc=edu"
-w xxxxxx -s sub '(&(objectClass=user)(SAMAccountName=adamski))'
# extended LDIF
#
# LDAPv3
# base <dc=graceland,dc=edu> with scope subtree
# filter: (&(objectClass=user)(SAMAccountName=adamski))
# requesting: ALL
#

# John Adamski, ITS, graceland.edu
dn: CN=John Adamski,OU=ITS,DC=graceland,DC=edu
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: John Adamski
sn: Adamski
description: 
userCertificate:: MIIFkDCCBHigAwIBAgIKHHdx6wAAAAAQzDANBgkqhkiG9w0BAQUFADBBMRMw
--{cut to shorten}--
givenName: John
distinguishedName: CN=John Adamski,OU=ITS,DC=graceland,DC=edu
instanceType: 4
whenCreated: 20010606135700.0Z
whenChanged: 20120907063705.0Z
displayName: John Adamski
uSNCreated: 145075
--{cut to shorten}--
memberOf: CN=Employees,OU=Groups,DC=graceland,DC=edu
memberOf: CN=Domain Users,OU=Groups,DC=graceland,DC=edu
memberOf: CN=ITS2,OU=Groups,DC=graceland,DC=edu
memberOf: CN=ITS,OU=Groups,DC=graceland,DC=edu
memberOf: CN=Users,CN=Builtin,DC=graceland,DC=edu
uSNChanged: 24370300
department: ITS
homeMTA: CN=Microsoft MTA,CN=OWLERY,CN=Servers,CN=Exchange Administrative Grou
 p (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Graceland University,CN=Micro
 soft Exchange,CN=Services,CN=Configuration,DC=graceland,DC=edu
proxyAddresses: x400:C=US;A= ;P=Graceland Univ;O=GRACELAND;S=Adamski;G=John;
--{cut to shorten}--
proxyAddresses: SMTP:adamski@graceland.edu
homeMDB: CN=EVA_EMP0,CN=EVA_EMP0,CN=InformationStore,CN=OWLERY,CN=Servers,CN=E
 xchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Gr
 aceland University,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=grac
 eland,DC=edu
publicDelegatesBL: --{cut to shorten}--
mDBUseDefaults: TRUE
mailNickname: adamski
protocolSettings:: SFRUUMKnMcKnMcKnwqfCp8KnwqfCpw==
protocolSettings:: T1dBwqcx
name: John Adamski
objectGUID:: kHbYg7KajEmR9dRHerQW0Q==
userAccountControl: 544
badPwdCount: 0
codePage: 0
countryCode: 0
homeDirectory: \\graceland.edu\GU\ITS\adamski
homeDrive: H:
badPasswordTime: 129914084615030294
lastLogon: 129914878351286795
scriptPath: main.bat
logonHours:: ////////////////////////////
pwdLastSet: 128183492254918750
primaryGroupID: 44955
userParameters:: bSAgICAgICAgICAgICAgICAgICAgIGQJICAgICAgICAgICAgICAgICAgICAgI
 CAgUAA=
objectSid:: AQUAAAAAAAUVAAAASWoeCRIDABfsKyRc7DAAAA==
adminCount: 1
accountExpires: 0
logonCount: 29825
sAMAccountName: adamski
sAMAccountType: 805306368
showInAddressBook: CN=Office List,CN=All Address Lists,CN=Address Lists Contai
 ner,CN=Graceland University,CN=Microsoft Exchange,CN=Services,CN=Configuratio
 n,DC=graceland,DC=edu
showInAddressBook: CN=Information Technology Services,CN=Office List,CN=All Ad
 dress Lists,CN=Address Lists Container,CN=Graceland University,CN=Microsoft E
 xchange,CN=Services,CN=Configuration,DC=graceland,DC=edu
showInAddressBook: CN=All Users,CN=All Address Lists,CN=Address Lists Containe
 r,CN=Graceland University,CN=Microsoft Exchange,CN=Services,CN=Configuration,
 DC=graceland,DC=edu
showInAddressBook: CN=Default Global Address List,CN=All Global Address Lists,
 CN=Address Lists Container,CN=Graceland University,CN=Microsoft Exchange,CN=S
 ervices,CN=Configuration,DC=graceland,DC=edu
legacyExchangeDN: /o=GRACELAND COLLEGE/ou=GRACELAND/cn=RECIPIENTS/cn=ADAMSKI
userPrincipalName: adamski@graceland.edu
lockoutTime: 0
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=graceland,DC=edu
msNPAllowDialin: TRUE
dSCorePropagationData: 20111027152723.0Z
dSCorePropagationData: 16010101000000.0Z
lastLogonTimestamp: 129914734259926191
uid: adamski
textEncodedORAddress: c=US;a= ;p=GRACELAND;o=Exchange;s=Adamski;g=John;
mail: adamski@graceland.edu
manager: CN=Jim McKinney,OU=ITS,DC=graceland,DC=edu
msSFU30Name: adamski
msSFU30NisDomain: graceland
uidNumber: 548
gidNumber: 120
unixHomeDirectory: /home/carsids/adamski
loginShell: /bin/csh
msExchHomeServerName: /o=GRACELAND COLLEGE/ou=Exchange Administrative Group (F
 YDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=OWLERY
msExchALObjectVersion: 426
msExchMailboxSecurityDescriptor:: AQAUjBQAAAAwAAAATAAAAHwAAAABBQAAAAAABRUAAABJ
 ah4JEgMAF+wrJFycBAAAAQUAAAAAAAUVAAAASWoeCRIDABfsKyRcnAQAAAIAMAACAAAAAtAUAAMAD
--{cut to shorten}--
 eCRIDABfsKyRc9AEAAAASJAABAA8AAQUAAAAAAAUVAAAASWoeCRIDABfsKyRcBwIAAA==
msExchUserAccountControl: 0
msExchIMACL:: AAAAAgAAAAZwADNwAAAAAGh0dHA6Ly9pbS5ncmFjZWxhbmQuZWR1L2luc3Rtc2cv
 YWxpYXNlcy9hZGFtc2tp
msExchIMACL:: AAAAAQAAAAcQAAEwAAAAAA==
msExchIMMetaPhysicalURL: http://im.graceland.edu/instmsg/aliases/adamski
msExchIMPhysicalURL: http://prospero/instmsg/local/im.graceland.edu/instmsg/al
 iases/adamski
msExchIMVirtualServer: CN=1\0ADEL:12b885bd-ff27-4866-8203-f41d47df347e,CN=Dele
 ted Objects,CN=Configuration,DC=graceland,DC=edu
msExchIMAddress: adamski@graceland.edu
msExchMailboxGuid:: qncADbVPBUyAnYzsTc0lSw==
msExchPoliciesIncluded: {7EE1CD7B-31D1-4D14-96B2-F079DEBBF6F8},{26491CFC-9E50-
 4857-861B-0CB8DF22B5D7}
msExchRecipientDisplayType: 1073741824
msExchUserCulture: en-US
msExchVersion: 4535486012416
msExchRecipientTypeDetails: 1
msExchMobileMailboxFlags: 1
ciscoatUserProfile: CN=adamski-profile-{78919040907072005},OU=profiles,OU=CCN,
 OU=CiscoCCM,DC=graceland,DC=edu
ciscoatUserProfileString: cn=adamski-profile-{78919040907072005},ou=profiles,
 ou=CCN,ou=CiscoCCM, dc=graceland,dc=edu
ciscoatGUID: -{78919040907072005}

# search reference
ref: ldap://ForestDnsZones.graceland.edu/DC=ForestDnsZones,DC=graceland,DC=edu

# search reference
ref: ldap://DomainDnsZones.graceland.edu/DC=DomainDnsZones,DC=graceland,DC=edu

# search reference
ref: ldap://graceland.edu/CN=Configuration,DC=graceland,DC=edu

# search result
search: 2
result: 0 Success

# numResponses: 5
# numEntries: 1
# numReferences: 3



What do I have configured wrong.  I need to get this working any help would be appreciated.

John

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message