[Fedora-directory-users] apache ldap over SSL.

[Mickael Besse]

I've install fedora core 5 and try to cofigure httpd 2.2.

without SSL, it's ok with this conf:

LDAPTrustedGlobalCert CA_BASE64 /etc/httpd/conf/cert.pem


<Directory "/var/www/html">

AuthName "bienvenue"
AuthType Basic

AuthBasicProvider ldap
AuthLDAPURL ldap://*.*.*.*/dc=*,dc=*?uid?sub
AuthzLDAPAuthoritative off
require valid-user

</Directory>

Then I just replace ldap for ldaps, and after my first log (I haven't three 
attempt ), I 'm redirected to this page:

Internal Server Error
The server encountered an internal error or misconfiguration and was unable 
to complete your request.

Please contact the server administrator, root at localhost and inform them of 
the time the error occurred, and anything you might have done that may have 
caused the error.

More information about this error may be available in the server error log.


In httpd log I have:  auth_ldap authenticate: user test authentication 
failed; URI / [LDAP: ldap_simple_bind_s() failed][Can't contact LDAP server]

In fedora directory server log : SSL connection from 10.50.7.72 to 
10.50.7.72
[15/Jun/2006:12:18:04 +0200] conn=308 SSL 256-bit AES
[15/Jun/2006:12:18:04 +0200] conn=308 op=-1 fd=68 closed - B1

I have to change an other thing than AuthLDAPURL for SSL???

>From: "Graham Leggett" <minfrin at sharp.fm>
>Reply-To: "General discussion list for the Fedora Directory server 
>project." <fedora-directory-users at redhat.com>
>To: "General discussion list for the Fedora Directory server project." 
><fedora-directory-users at redhat.com>
>CC: fedora-directory-users at redhat.com
>Subject: Re: [Fedora-directory-users] apache ldap over SSL.
>Date: Mon, 12 Jun 2006 13:28:36 +0200 (SAST)
>
>On Mon, June 12, 2006 12:18 pm, Mickael Besse wrote:
>
> > Httpd v 2.0.53
>
>Use the latest v2.2.x. The LDAP support in v2.0.x was experimental, and a
>lot of rewriting and fixing happened that could not be easily backported
>to v2.0. When v2.2.0 of httpd was finally released a while back, the LDAP
>support was no longer experimental.
>
>The v2.2.x httpd should work with SSL, I spent quite a bit of time trying
>to bend my head around the different LDAP client toolkits to make sure
>their SSL worked consistently for APR.
>
>Regards,
>Graham
>--
>
>
>--
>Fedora-directory-users mailing list
>Fedora-directory-users at redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-directory-users

_________________________________________________________________
Windows Live Mail : découvrez et testez la version bêta ! 
http://www.ideas.live.com/programpage.aspx?versionId=5d21c51a-b161-4314-9b0e-4911fb2b2e6d