NetWare 6.5 & Apache

[SimonMag]

I am having a problem with Apache, I have an area of our website which needs to be password protected, I have had a look at the support docs on Apache and Novell and have not been able to find anything of use.

Could anyone point me at some useful documentation or a pointer on how to do it.

Thanks

Simon.

 

[SimonMag]

I have managed to get Apache to now prompt for a password, but will not allow any user to login. Checking the LDAP debug info I am getting the following messages:


DoSearch on connection 0x90b470e0
Search request:
base: "o=bottomline"
scope:2 dereference:3 sizelimit:0 timelimit:0 attrsonly:0
filter: "(&(objectclass=*)(uid=admin))"
no attributes
Empty attribute list implies all user attributes
Sending search result entry "cn=admin,o=Bottomline" to connection 0x90b470e0
Sending operation result 0:"":"" to connection 0x90b470e0
DoBind on connection 0x90b470e0
Bind name:cn=admin,o=Bottomline, version:3, authentication:simple
Rejecting unencrypted bind on cleartext port in nds_back_bind, err = 13
Sending operation result 13:"":"" to connection 0x90b470e0
New TLS connection 0x8bb81380 from 172.20.200.1:1229, monitor = 0x1ec, index = 12
Monitor 0x1ec initiating TLS handshake on connection 0x8bb81380
DoTLSHandshake on connection 0x8bb81380
Completed TLS handshake on connection 0x8bb81380
DoBind on connection 0x8bb81380
Bind name:cn=iFolder_ServerAgent,o=bottomline, version:3, authentication:simple
Sending operation result 0:"":"" to connection 0x8bb81380
DoUnbind on connection 0x8bb81380
Connection 0x8bb81380 closed

Does anyone have an idea on why the lookups are bing regected?

Thanks

Simon.

 

[marvhuffaker]

Simon, it looks like you have a problem with encrypted vs. unencrypted ldap queries. Your username/password is going in as unencrypted but the server is configured to require it in encrypted form. There are some novell TIDS about how to correctly set this up with LDAP. Do a search on novells knowledgebase for TLS and LDAP.

Sometimes the recommendation is to clear all of the encryption stuff first, get that working.. then add in the encryption and TLS. That way you are not troubleshooting the wrong thing and chasing your tail.




Marvin Huffaker MCNE, CNE
Marvin Huffaker Consulting

http://www.redjuju.com

 

[SimonMag]

Thanks Marvin.

I have managed to get it to work by removing the TLS, I will have a look in the knowledgebase for the other tids.

Thanks

Simon.