You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by "Del Greco, Marcus" <ma...@unh.edu> on 2006/03/31 16:34:35 UTC

[users@httpd] mod_auth_ldap under Apache 2.0.52, Red Hat

Hello,

I am using mod_auth_ldap under Apache 2.0.52 on Red Hat, via an
.htaccess file, to authenticate users into a directory where I have a
cgi application.  Initial authentication works just fine.

The problem comes when the browser is left unattended for awhile, when
the user is logged in.  If there is no activity for some undetermined
amount of time (but almost always when left overnight), the
authentication seems to grow "stale", and navigating within my
application will not continue unless several or more clicks are applied.
After clicking for a minute or two, something breaks the log jam, and
suddenly the app is working fine again.  No error is every given eithher
in the browser or the Apache error log.  Just hangs until it breaks
through.

Seems to happen in all browsers I've tested.

Behavior goes away when I remove the .htaccess file, but so does the
authentication challenge.   :)

The content are my .htaccess file are as follows:

AuthName LDAPaccess
AuthType Basic
Satisfy All

AuthLDAPURL
ldap://our.ldap.server/dc=unh,dc=edu?uid?base?(objectClass=*)
require valid-user

Not knowing really where to start, I tried tweaking cache settings in
httpd.conf as below, to no effect:

<ifModule mod_auth_ldap>
     AuthLDAPCacheTTL 0
</IfModule>

Does anyone have experience with the details of LDAP authentication that
migth help me get by this "stickiness" problem when the browser remains
idle for long periods?

Marcus



--
Marcus Del Greco
Computing and Information Services
University of New Hampshire
http://pubpages.unh.edu/~delgreco

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org