Author |
|
megha_kolombkar
Joined: 04 Feb 2010 Posts: 4
|
Posted: Thu 04 Feb '10 15:51 Post subject: Need to restart machine where apache server is configured. |
|
|
Hello
I have configured the SVN setup using the apache server (LDAP +SSL configuration). When i try to login thru the Tortoise SVN client i face issues in logging in with the following error in logs "auth_ldap authenticate: user abc authentication failed; URI /test [ldap_search_ext_s() for user failed][Operations Error]"
Wen i restart my machine i am able to login successfully.
LDAP configuration below.
##################
#Subversion configuration - Enable LDAP
<Location /test>
DAV svn
SVNPath C:/svnroot/test
#Do basic password authentication in the clear
AuthType Basic
AuthName "Subversion Repository"
#Make LDAP the authentication mechanism
AuthBasicProvider "ldap"
#Options FollowSymLinks
Order allow,deny
Allow from all
#The LDAP query URL
AuthLDAPURL "ldap://server.example.com:389/DC=example,DC=com?sAMAccountName?sub?(objectClass=user)"
#Make LDAP authentication is final
AuthzLDAPAuthoritative off
#Active Directory requires an authenticating DN to access records
AuthLDAPBindDN "abc@example.com"
#This is the password for the AuthLDAPBindDN user in Active Directory
AuthLDAPBindPassword "mypasswd123"
AuthzSVNAccessFile C:/etc/svn-acl_intel
Require valid-user
</Location>
##################
Please let me know if I have been missing on any of the configurations. I have the IIS service disabled on boot up and then start the APACHE service.
Using Apache 2.2.14. Please let me know if there is any other information that you would need to know.
Thanks
-M |
|
Back to top |
|
James Blond Moderator
Joined: 19 Jan 2006 Posts: 7298 Location: Germany, Next to Hamburg
|
|
Back to top |
|
megha_kolombkar
Joined: 04 Feb 2010 Posts: 4
|
Posted: Fri 05 Feb '10 8:06 Post subject: |
|
|
Hi,
I have used the same link to setup my configuration , but I do not find the reason/solution to restart m/c time and again when I face the error "auth_ldap authenticate: user abc authentication failed; URI /test [ldap_search_ext_s() for user failed][Operations Error]"
Is there any thing else that I may be missing or is this a standard behaviour?
Thanks
-Megha |
|
Back to top |
|
megha_kolombkar
Joined: 04 Feb 2010 Posts: 4
|
Posted: Mon 08 Feb '10 12:39 Post subject: |
|
|
Hello All,
Currently, I am moving with the restart. I have another issue. Can we have "AuthLDAPBindPassword "mypasswd123"" removed from the file as the password should not be displayed in the file. Instead, there may be methods to have some pop -up or some encrypted passwords. I still want to use LDAP and not use htpasswd for any encryprion. I want the username and password that goes into the flat file be picked at runtime.
Can someone suggest me if there is any know way to do this?
Thanks
-Megha |
|
Back to top |
|
James Blond Moderator
Joined: 19 Jan 2006 Posts: 7298 Location: Germany, Next to Hamburg
|
Posted: Mon 08 Feb '10 18:47 Post subject: |
|
|
mod_sspi can also work with a domain, but I think it is easier to manage.
Something like
Code: |
<Location /test>
Options All +MultiViews +ExecCGI -Indexes +Includes
AllowOverride None
Order allow,deny
Allow from all
# SSPI authentication
AuthName "Please Enter Your Username and Password"
AuthType SSPI
SSPIAuth On
SSPIAuthoritative On
require valid-user
</Location>
|
I think you can combine that with your svn set up
http://sourceforge.net/projects/mod-auth-sspi/
I don't know if it loads in 2.2.14. |
|
Back to top |
|
megha_kolombkar
Joined: 04 Feb 2010 Posts: 4
|
Posted: Tue 09 Feb '10 12:22 Post subject: |
|
|
Hello James,
I have a query as to, if both SSPI and LDAP can be configured together?
As per my finding looks like either one can be used for authentication.
Please correct me if I am wrong .
Thanks
-Megha |
|
Back to top |
|
James Blond Moderator
Joined: 19 Jan 2006 Posts: 7298 Location: Germany, Next to Hamburg
|
Posted: Tue 09 Feb '10 19:42 Post subject: |
|
|
I haven't tried it out. But I think it should work together. Since the other auth methods work together.
Trial and error |
|
Back to top |
|