Re: PerlCGI + Apache ldap authentication configuration

The user to be authenticated and the user to bind are usually different, and so are the password that you enter on the webpage and the AuthLDAPBindPassword
also note the AuthLDAPBindPassword example in the docs doesn't have quotes, so probably your server thinks the quotes in your AuthLDAPBindPassword directive are part of the bind user's password

Comment on Re: PerlCGI + Apache ldap authentication configuration Select or Download Code

Replies are listed 'Best First'.
Re^2: PerlCGI + Apache ldap authentication configuration by vinoth.ree (Monsignor) on Apr 13, 2020 at 05:20 UTC
Hi soonex 1.Yes, I have configured my credentials to bind with ldap server and trying to authenticate with my colleagues credentials, and getting the same password mismatch erro.r 2.I already tried the AuthLDAPBindPassword without the double quotes. Seems quoting does not matter. *All is well. I learn by answering your questions...*	[reply]
Re^3: PerlCGI + Apache ldap authentication configuration by soonix (Chancellor) on Apr 13, 2020 at 08:56 UTC
Hmmm. In this case, my next step would be to look in the DC's event log. (Ours is configured to log failed authentication attempts, I suppose yours does this, too) And, although the last message says "Password Mismatch", theoretically it could be a misspelt username as well, or even a wrong domain.	[reply]
Re^4: PerlCGI + Apache ldap authentication configuration by vinoth.ree (Monsignor) on Apr 14, 2020 at 17:51 UTC
Hi soonix, I fixed the issue. `AuthLDAPURL "LDAP://xx.xx.xxx.xx:389/OU=Accounts,OU=XX,OU=XXXX,OU=XX,D +C=DOMAIN,DC=com?sAMAccountName?sub?(&(sAMAccountName=)(objectClass=P +erson))" AuthLDAPBindDN "CN=service-account,OU=ProcessIDs,OU=Logical Secure,OU= +Core Directory Service,DC=DOMAIN,DC=com"` [download] I found that at `AuthLDAPURL` line we need to use the authenticated user's DN details + the filter information and at `AuthLDAPBindDN` line we need to put the service account's dn details. All is well. I learn by answering your questions...*	[reply] [d/l] [select]