You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2006/03/15 12:37:59 UTC

DO NOT REPLY [Bug 38979] New: - LDAP PassWord Mismatch

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=38979>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=38979

           Summary: LDAP PassWord Mismatch
           Product: Apache httpd-2
           Version: 2.2.0
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_auth_ldap
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: alcol@hotmail.com


Wed Mar 15 12:11:42 2006] [error] [client 10.8.254.13] user admin: 
authentication failure for "/ucre": Password Mismatch

I try against a Lotus Domino Server (our corporate server mail domain) and I'm 
the administrator of everything (Network, Security, Unix BOX, Apache 2.2.0 
server, DOMINO domain, .........

The password supplied IS VALID. Trought other WEB places with different loads 
WebSphere, ISAPI Filter for LDAP for IIS5, 6          works fine (the one in 
ISAPI has been setup by me in past.

With authnz_ldap strangely I get back a PASSWORD MISMATCH

  AuthType basic
  AuthBasicProvider ldap
  AuthName "UCRE"
  AuthLDAPUrl ldap://server-name.domain.xx:389/o=GSI,c=it?uid?sub NONE
  AuthLDAPBindDN <censored for security>
  AuthLDAPBindPassword <censored for secutiry>
  require valid-user

* On the LDAP Server I get NO MESSAGES of Failed DN Bind. So the authentication 
to query the LDAP pass. If I change the password "correctly" warn me about a 
FAILED DN BIND REQUEST! so it work but say MISMATCH to user's passwords.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

DO NOT REPLY [Bug 38979] - LDAP PassWord Mismatch

Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=38979>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=38979





------- Additional Comments From bnicholes@apache.org  2006-03-15 15:26 -------
Are you sure that you are not failing authorization?  In order to use the 
valid-user authorization, your configuration will also 
need 'AuthzLDAPAuthoritative off' and mod_authz_user module will have to be 
loaded.  Otherwise mod_authnz_ldap will attempt to authorize the user and 
since it doesn't know what 'valid-user' means, it fails the request.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

DO NOT REPLY [Bug 38979] - LDAP PassWord Mismatch

Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=38979>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=38979





------- Additional Comments From alcol@hotmail.com  2006-03-15 16:58 -------
With AuthzLDAPAuthoritative off it works fine but from the MOD manual page was 
not so clear at least today for me.


-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

DO NOT REPLY [Bug 38979] - LDAP PassWord Mismatch

Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=38979>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=38979





------- Additional Comments From alcol@hotmail.com  2006-03-15 18:12 -------
*** Bug 38978 has been marked as a duplicate of this bug. ***

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

DO NOT REPLY [Bug 38979] - LDAP PassWord Mismatch

Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=38979>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=38979


jorton@redhat.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID




------- Additional Comments From jorton@redhat.com  2006-04-11 13:31 -------
This is explicitly mentioned in the docs, FWIW:

http://httpd.apache.org/docs/2.2/mod/mod_authnz_ldap.html#reqvaliduser

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org