apache htaccess ldap > server 2003

[browolf]

trying to secure a wordpress site running on xampp with ldap and htaccess file

it's not working and apache log files are no help.

looking at the ldap requests in wireshark

 

bindrequest(187) " simple

bindresponse(187) success

searchrequest (6710905) dc=domaindnszones, dc=domain, dc=lancs, dc=sch,dc=uk" wholesubtree filter: (&(objectclass=*)([email protected]))

searchresdone(67109056) operations error ldaperr: DSID-0c090627 in orderr to perform this op a successful bind must be completed

 

bindrequest(188) "

bindresponse(188) success

searchrequest (100663488) dc=configuration, dc=domain, dc=lancs, dc=sch,dc=uk" wholesubtree filter: (&(objectclass=*)([email protected]))

searchresdone(100663488) operations error ldaperr: DSID-0c090627 in orderr to perform this op a successful bind must be completed

 

I think the problem is its not binding with the account details in the htaccess file. i have no idea why tho.

 

my htaccess file is:

 

# Authentication realm and method:
AuthType Basic
AuthName "LDAP Auth"
AuthBasicProvider ldap
AuthUserFile /dev/null 
AuthBasicAuthoritative Off 

# DN of Active Directory server
AuthLDAPUrl ldap://server.domain.lancs.sch.uk:389/DC=domain,DC=lancs,DC=sch,DC=uk??base?(objectClass=*)

# An account in the AD that has enough permissions to perform an LDAP search
AuthLDAPBindDN [email protected]
AuthLDAPBindPassword password

# When checking for group membership, use the DN of the user, not the HTTP entry
AuthLDAPGroupAttributeIsDN on

# Require groups, specifying the DN of the security group
require group CN=teachergroup,OU=teacherou,DC=domain,DC=lancs,DC=sch,DC=uk
require group CN=Domain Admins,OU=Adminsou,DC=domain,DC=lancs,DC=sch,DC=uk

 

have also tried but to no avail

AuthLDAPBindDN "CN=domainadminaccount,ou=admins,DC=domain,DC=lancs,DC=sch,DC=uk"

 

I think the problem is its not binding with the account details in the htaccess file. i have no idea why tho.

Edited July 2, 2010 by browolf

[browolf]

I've discovered I need

 

Require valid-user

 

in htaccess to force it to use specific credentials when binding

 

however now everything succeeds with no errors, it comes back with 0 results and apache logs say [user not found][No Such Object]