Michael`s Blog OSS/Linux, networking and my private life

Apache-SSL BasicAuth not working after Sarge upgrade

After upgrading the debian apache-ssl package from woody to sarge the Basic Authentication did not work anymore.

In my case the error was the SSLFakeBasicAuth setting in the httpd.conf.
Unsetting this directive fixed the problem

Apache LDAP and htaccess authentication

if you would like to setup an two phase apache2 htaccess+ldap authentication this are the right settings:

AuthName "access" AuthType Basic AuthUserFile /etc/apache2/rt.htpasswd AuthLDAPAuthoritative On AuthAuthoritative Off AuthLDAPURL "ldap://host/OU=<name>,DC=<domain>,DC=com?samAccountName?sub?(objectCategory=person)(ObjectClass=User)" AuthLDAPBindDN <binduser> AuthLDAPBindPassword <bindpassword> order allow,deny allow from all require valid-user

the important settings are:

AuthLDAPAuthoritative On AuthAuthoritative Off

with his apache checks both the htaccess and the LDAP users