SID-00184: Using secure LDAP auth

Status:	Unanswered	TWiki version:	4.2.4	Perl version:	ActivePerl 5.8.9.825
Category:	CategoryAuthentication	Server OS:	SLES 10 SP2	Last update:	16 years ago

Does anybody see something wrong/missing in my twiki.conf file? I get the error message "ldap_simple_bind_s() failed][Can't contact LDAP server]" .

twiki.conf:

AllowOverride None Order Allow,Deny Allow from all Deny from env=blockAccess

Options ExecCGI FollowSymLinks SetHandler cgi-script

# Password file for TWiki users # AuthUserFile /var/twiki-4.2.4/data/.htpasswd # AuthName 'Enter your WikiName: (First name and last name, no space, no dots, capitalized, e.g. JohnSmith). Cancel to register if you do not have one.' # AuthType Basic

# Modified for LDAP by James Youngman AuthLDAPURL ldaps://ldap.xx.com/ou=People,o=xx.com AuthType Basic AuthName "XXXX" AuthBasicProvider ldap AuthUserFile /dev/null

# Limit access to configure to specific IP addresses and or users. # Make sure configure is not open to the general public. # It exposes system details that can help attackers. SetHandler cgi-script Order Deny,Allow Allow from all

# When using Apache type login the following defines the TWiki scripts # that makes Apache ask the browser to authenticate. It is correct that # scripts such as view are not authenticated. require valid-user

# Enable mod_perl for the bin scripts listed SetHandler perl-script PerlResponseHandler ModPerl::Registry PerlSendHeader On PerlOptions +ParseHeaders

-- JamesWYoungman - 11 Mar 2009

Discussion and Answer

Closing this question after more than 30 days of inactivity. Feel free to reopen if needed. Consider engaging one of the TWiki consultants if you need timely help. We invite you to get involved with the community, it is more likely you get community support if you support the open source project!

-- PeterThoeny - 2009-04-17

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.