| numanoids 2005-09-26, 2:49 am |
| Guys
Looking for some help, i'm trying to get apache authenticating users to
my AD domain. I've tried kerberos, but without getting one of the AD
Admins to generate the keytab its a no go just now.
I thought I'd give mod_auth_ldap a go and while its working, it will
only let me authenticate against an OU within the root of the
directory.
This is the entry in my directory configuration
AuthLDAPUrl
"ldap://adserver.domain.com/OU=3DUK,DC=3Ddomain,DC=3Dcom?sAMAccountName?sub=
?(obje=ADctClass=3D*)"
Which works fine, but if I try to change this to:
AuthLDAPUrl
"ldap://adserver.domain.com/DC=3Ddomain,DC=3Dcom?sAMAccountName?sub?(object=
Clas=ADs=3D*)"
I get a raft of Operations errors when the configuration is set to
this. Due to our AD setup, I'd prefer to be able to authenticate
against the entire directory instead of restricting to one of the OUs
only.
I've found someone complaining of this already but have not managed to
find a solution.
Has anyone got a solution for this or even some other suggestions of
getting apache to authenticate against the AD.=20
THanks=20
Darren
|