Arch Linux

dlin

Member

From: Taipei,Taiwan

Registered: 2005-09-21

Posts: 265

lighttpd with ldap auth failed

Dear All,
Have any body succesfull setup the lighttpd 1.4.19-3 with ldap auth?

I found it is failed when I launch http://localhost/server-status

Here is my /etc/lighttpd/lighttpd.conf settings
I turn on following modules:

server.modules              = (
       "mod_access",
       "mod_auth",
      "mod_status",         
      "mod_fastcgi",
       "mod_accesslog")
#### status module
status.status-url          = "/server-status"
status.config-url          = "/server-config"

auth.debug=2
auth.backend               = "ldap"
auth.backend.ldap.hostname = "mysrv"
auth.backend.ldap.base-dn  = "ou=myou,dc=mydc,dc=com"
auth.backend.ldap.filter   = "(uid=$)"

auth.require               = ( "/server-status" =>
                               (
                                 "method"  => "basic",
                                 "realm"   => "test",
                                 "require" => "valid-user"
                               ),
                             )

in /var/log/lighttpd/error.log
2008-07-18 17:27:10: (server.c.1475) server stopped by UID = 0 PID = 7592
2008-07-18 17:27:12: (log.c.75) server started
2008-07-18 17:27:26: (http_auth.c.761) ldap ...
2008-07-18 17:27:26: (http_auth.c.866) password doesn't match for  /server-config myname , IP: 127.0.0.1
2008-07-18 17:45:20: (http_auth.c.761) ldap ...
2008-07-18 17:45:20: (http_auth.c.866) password doesn't match for  /server-status myname , IP: 127.0.0.1

---

Running 4 ArchLinux including sh4twbox,server,notebook,desktop. my AUR packages

_AA_

Member

From: Maidstone, UK

Registered: 2008-07-14

Posts: 19

Website

Re: lighttpd with ldap auth failed

2008-07-18 17:27:26: (http_auth.c.866) password doesn't match for  /server-config myname , IP: 127.0.0.1

Looks like this could be related to DNS or hostnames?

Also, what is myname?

dlin

Member

From: Taipei,Taiwan

Registered: 2005-09-21

Posts: 265

Re: lighttpd with ldap auth failed

I use wireshark to trace the tcp/ip packet, and found it shows three packet, when ldap auth is required:

my_machine  -> ldap_machine  LDAP
my_machine  <- ldap_machine 
my_machine  -> ldap_machine 

So, I'm sure it is not related to DNS nor hostname problem.

---

Running 4 ArchLinux including sh4twbox,server,notebook,desktop. my AUR packages

_AA_

Member

From: Maidstone, UK

Registered: 2008-07-14

Posts: 19

Website

Re: lighttpd with ldap auth failed

TCP Handshake?

Any logs from the ldap host?

dlin

Member

From: Taipei,Taiwan

Registered: 2005-09-21

Posts: 265

Re: lighttpd with ldap auth failed

unfortunely, I don't have ldap admin, So, it impossible to read the ldap server's log.
But wireshark's packet not only TCP handshake.  It display LDAP's packet content, and the ldap server return by LDAP packet and successful (even I type the wrong password.)

Hi, _AA_, do you have successful install the lighttpd and ldap auth on archlinux?

---

Running 4 ArchLinux including sh4twbox,server,notebook,desktop. my AUR packages

_AA_

Member

From: Maidstone, UK

Registered: 2008-07-14

Posts: 19

Website

Re: lighttpd with ldap auth failed

I'm afraid I have not, but from the logs it appears as though the username/password combination for a set hostname or IP address is not valid.

At this stage I'd check the ldap logs as I suspect that might offer more insight as to where the problem lies.

dlin

Member

From: Taipei,Taiwan

Registered: 2005-09-21

Posts: 265

Re: lighttpd with ldap auth failed

well, I've use other ldap utils to check.  I'm very sure my user name and password were matched.

Thanks your reply, but it can't help me solve this problem.

---

Running 4 ArchLinux including sh4twbox,server,notebook,desktop. my AUR packages