DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=28511>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=28511

mod_auth_ldap: require group failing with ads2003

           Summary: mod_auth_ldap: require group failing with ads2003
           Product: Apache httpd-2.0
           Version: 2.0.49
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: mod_auth_ldap
        AssignedTo: [email protected]
        ReportedBy: [EMAIL PROTECTED]


I have tested a configuration against WIN2003-ADS with a combination of 
AuthLdapUrl, AuthLDAPBindDN, AuthLDAPBindPassword 
which works fine, if I ask for 
"require valid-user". 
 
But if i ask for  
require group CN=groupname,CN=Users,DC=my_domain,DC=top-level-dom 
the authentification fails. 
(Yes, I also removed the '"' around the groupname) 
 
Ethereal shows me a successful BIND and then a compare request, 
testing the attribut "member" and later "uniquemember" against my group-name. 
Both fail with "no such attribute", but the error-message is different, because 
the attribut "member" exists, while "uniquemember" doesn't. 
 
I tested the existence and value of the attribute "member" successfully with 
"ldapsearch". 
 
The error-message for "member" in ethereal is: 
Error Message: 00002080, AtrErr:DSID-03080139, #1:\n\t0: 
00002080:DSID-03080139,problem 1001 (NO_ATTRIBUTE_OR_VAL), data 0, Att 1f 
(member)\n 
 
Any idea?

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to