Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
 Topic: Cannot authenticate locally when LDAP is offline |
|
| Author |
|
pseudoyams
Joined: 09 Jan 2014
Posts: 2
|
 Posted: Fri 10 Jan '14 15:50 Post subject: Cannot authenticate locally when LDAP is offline |
 |
|
Hello-
Im having a problem where local authentication will not work when when the configured LDAP server is unavailble. When the ldap server is online I can authenticate fine against ldap and local file. However, when the ldap server is offline, I cannot authenticate with the user1 account. The browser just sits at a blank screen.
Id appreciate any help you could provide. Ive searched a lot on this and found many examples, all very similar to my config below, but I still cannot failback authentication to local file when ldap is unavailable. Im running Apache/2.2.10. I have also tested this on 2.2.16 with the same results.
=======.htaccess==========================
AuthName "Server Access"
AuthType Basic
AuthBasicProvider file ldap
AuthUserFile /etc/apache2/htpasswd
AuthzLDAPAuthoritative off
AuthLDAPURL ldap://ldap.domain.com:389/OU=Users,DC=domain,DC=com?sAMAccountName
AuthLDAPBindDN "domain\ldap_user"
AuthLDAPBindPassword password
AuthLDAPGroupAttributeIsDN off
Require user user1
Require ldap-attribute memberOf=CN=groupName,DC=domain,DC=com
===========================================
Thanks. |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7371
Location: Germany, Next to Hamburg
|
| Posted: Mon 13 Jan '14 17:19 Post subject: |
|
|
| In worst case you could turn of the auth via AuthLDAPEnabled off |
|
| Back to top |
|
pseudoyams
Joined: 09 Jan 2014
Posts: 2
|
| Posted: Mon 13 Jan '14 17:27 Post subject: |
|
|
| Yes, of course. But something isnt working correctly here. Id rather get it to work correctly. |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7371
Location: Germany, Next to Hamburg
|
| Posted: Mon 13 Jan '14 20:37 Post subject: |
|
|
Maybe you can try to switch the providers, since the second one is the fall back
AuthBasicProvider ldap file
Also you might add Satisfy any at the end of that config part so that only one of the providers must match / be correct. |
|
| Back to top |
|
|
|
|
|
|
