Hi,

We're experiencing problems authenticating users with complex characters (8 bit 
character outside the us-ascii set e.g. pound-sterling symbol) in their 
password.

We're running Apache 2.2.3 on UNIX and, for Kerberos, running kinit from the 
command line authenticates users correctly (including users with complex 
characters in their password).  Through Apache though using Kerberos or LDAP, 
we're getting login failures only for this subset of users.  For LDAP 
authentication, mod_authz_ldap logs:

[Fri Mar 26 14:24:33 2010] [error] [client 128.240.56.105] [10639] bind as 
CN=user,OU=Users,DC=ncl,DC=ac,DC=uk failed: 49
[Fri Mar 26 14:24:33 2010] [error] [client 128.240.56.105] [10639] basic LDAP 
authentication of user 'user' failed

This would suggest that some translation of the password between the basic-auth 
and the LDAP server is not working.  Because we can use kinit successfully on 
the command line for Kerberos I'm pretty much ruling out the operating system 
(CENTOS) and was wondering if anyone has any experience of this kind of problem 
with Apache?

Or LDAP servers are windows active directory, a mix of Windows 2003 and 2008 
Server.  The web servers are running CENTOS Linux with an off-the-shelf CENTOS 
Apache and mod_authz_ldap.

Is anyone experiencing similar problems?

Thanks,

Chris
Newcastle University

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Reply via email to