Question

I have loaded these modules in Apache:

LoadModule ldap_module modules/mod_ldap.so
LoadModule authnz_ldap_module modules/mod_authnz_ldap.so

This is the error from apache logs:

[Tue Oct 02 09:39:39 2007] [warn] [client 10.224.102.162] [25295] auth_ldap authenticate: user dtolj authentication failed; URI /twiki/bin/configure.pl [LDAP: ldap_simple_bind_s() failed][Invalid credentials]

[Tue Oct 02 09:39:39 2007] [error] [client 10.224.102.162] user dtolj: authentication failure for "/twiki/bin/configure.pl": Password Mismatch

This is my twiki.conf file imported from http.conf

Alias /twiki "/var/www/html/twiki"

<Directory "/var/www/html/twiki/bin">
    AllowOverride none
    Order Allow,Deny
    Allow from All
    Deny from env=blockAccess

    Options ExecCGI FollowSymLinks
    SetHandler cgi-script

    # Password file for TWiki users
    AuthUserFile /var/www/html/twiki/data/.htpasswd
    AuthName 'Enter your WikiName: (First name and last name, no space, no dots, capitalized, e.g. JohnSmith). Cancel to register if you do not have one.'
    AuthType Basic

    # File to return on access control error (e.g. wrong password)
    #ErrorDocument 401 /twiki/bin/view/TWiki/TWikiRegistration


    #LDAP Authentication ==============================================
    AuthBasicProvider ldap


    # LDAP Authentication & Authorization is final; do not check other databases
    AuthzLDAPAuthoritative on

#  Do basic password authentication in the clear
   AuthType Basic
#  The name of the protected area or "realm" TWiki
   AuthName "Wiki: Enter your network uname/pasw"
#  Active Directory requires an authenticating DN to access records
   #AuthLDAPBindDN "cn=dtolj,ou=DOMAIN,dc=DOMAIN,dc=local"
   AuthLDAPBindDN cn=dtolj,cn=users,dc=DOMAIN,dc=DOMAIN,dc=local

#  This is the password for the AuthLDAPBindDN user in Active Directory
   AuthLDAPBindPassword psw
#  The LDAP query URL

   #AuthLDAPURL ldap://IP:3268/DC=DOMAIN,DC=local?sAMAccountName?sub?(objectClass=*)
   AuthLDAPURL ldap://IP:3268/cn=users,DC=DOMAIN,DC=local?sAMAccountName?sub?(objectClass=*)


   #AuthLDAPGroupAttribute department
   AuthLDAPGroupAttributeIsDN off
   require valid-user

   #End of LDAP authentication==========================================


# Limit access to configure to specific IP addresses and or users.
# Make sure configure is not open to the general public.
# It exposes system details that can help attackers.
<FilesMatch "^(configure)$">
    SetHandler cgi-script
    Order Deny,Allow
    Allow from All

    #Require user dtolj

</FilesMatch>

</Directory>

NOTE: I am not using .htaccess, since I have all the configuration in twiki.conf. Do I need it?

Environment

-- TWikiGuest - 02 Oct 2007

Answer

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

Sorry, closing this after more than 30 days of inactivity. Please feel free to re-open if needed.

-- PeterThoeny - 02 Dec 2007