I shudder to think about doing this for 720 medical students, some 1200
house staff, another 1000 or so affiliated faculty. However, being that
you mention "file" below, it's worth exploring if I can set up
AuthBasicProvider with a null or empty file [AuthBasicProvider file ldap
dbd] so that ldap and dbd are not 1st on the list.
Thanks,
-bill
Eric Covener wrote:
On Jan 24, 2008 3:13 PM, paredes <[EMAIL PROTECTED]> wrote:
Hi!
Only the 1st provider hits and returns "user not found" or "password
mismatch". The 2nd provider is never seen. I had expected to see some
type of error related to the 2nd provider. In the case where I use
"AuthBasicProvider ldap dbd" & provide a valid ldap user:password the
logs show ldap correctly authenticating/authorizing. When I provide a
valid mysql only user:password, the logs show that ldap fails but no
other action is taken.
When the arguments are reversed, and a valid mysql user:password is
presented the logs shows a hit with mysql correctly authenticating. But
when I provide an ldap only user:password the logs show mysql correctly
rejecting the user but no ldap activity.
Can you try LDAP and File (as in htpasswd -c ...)? This worked for me
in both directions.
On Jan 24, 2008 2:39 PM, Eric Covener <[EMAIL PROTECTED]> wrote:
> For LDAP, this is normally not being able to convert the basic auth
> username into a DN on the LDAP server.
I just verified that on 2.2.8 mod_authnz_ldap "gets out of the way"
for authentication when it's first and can't lookup a userid.
-- Eric Covener [EMAIL PROTECTED]
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
" from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]