hi,

after upgrading Lenny to Squeeze, ldap auth over .htacces/virtual-host.config stops working when using SSL. I've searched hours on friday and though packages are missing or broken. Apache2 brings only "Internal Server Error", but nothing in the error/debug logfiles. Apache asks for the username/password and the user can type anything, after some seconds you get the error page.
Then I switched to non SSL and, voila .. it works

==============

AuthType Basic
AuthName "Icinga Monitoring"
AuthBasicProvider ldap
AuthLDAPURL "ldap://ldap2/cn=accounts,dc=domain,dc=foo?uid?sub?(objectClass= *)"
AuthLDAPGroupAttribute member
AuthLDAPGroupAttributeIsDN On
AuthzLDAPAuthoritative Off

# Define allowed LDAP users
Require ldap-group cn=rbg,cn=admins,cn=groups,dc=domain,dc=doo

===============

this works

but not:

===============

AuthType Basic
AuthName "Icinga Monitoring"
AuthBasicProvider ldap
AuthLDAPURL "ldaps://ldap2:636/cn=accounts,dc=domain,dc=foo?uid?sub?(objectClass= *)"
AuthLDAPGroupAttribute member
AuthLDAPGroupAttributeIsDN On
AuthzLDAPAuthoritative Off

# Define allowed LDAP users
Require ldap-group cn=rbg,cn=admins,cn=groups,dc=domain,dc=foo

===============

any suggestions?

cu denny



--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 9EA677A5-7EAB-49B3-B377-1D036FBB6711@4lin.net">http://lists.debian.org/9EA677A5-7EAB-49B3-B377-1D036FBB6711@4lin.net

I'm having the example same problem after my upgrade from Lenny to Squeeze

With SSL on this just gives me "Internal Server Error" without writing to the logs:
<Location /usvn-1.0/svn/>
ErrorDocument 404 default
DAV svn
SVNParentPath /var/www/usvn-1.0/files/svn
SVNListParentPath off
AuthType Basic
AuthName "USVN"
AuthBasicProvider ldap
AuthzLDAPAuthoritative off
AuthLDAPURL ldaps://myserver.mydomain.com:989/cn=users,dc=myserver,dc=mydomain,dc=com?uid
AuthzSVNAccessFile /var/www/usvn-1.0/files/authz
Require valid-user
</Location>

If I turn SSL off on the LDAP server the following works fine:
<Location /usvn-1.0/svn/>
ErrorDocument 404 default
DAV svn
SVNParentPath /var/www/usvn-1.0/files/svn
SVNListParentPath off
AuthType Basic
AuthName "USVN"
AuthBasicProvider ldap
AuthzLDAPAuthoritative off
AuthLDAPURL ldap://myserver.mydomain.com:389/cn=users,dc=myserver,dc=mydomain,dc=com?uid
AuthzSVNAccessFile /var/www/usvn-1.0/files/authz
Require valid-user
</Location>



--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 7AECB912-7D3B-47A3-A0E0-361B3889023A@gmail.com">http://lists.debian.org/7AECB912-7D3B-47A3-A0E0-361B3889023A@gmail.com