On Tuesday 12 June 2007 15:07, Henning Brauer wrote:

quoted text
> * Thierry Lacoste  [2007-06-12 14:35]:

> > Hello,

> >

> > I'm using mod_auth_ldap-1.6.0p3 on OpenBSD 4.1

> > and I'd like to make it authenticate on 2 ldap servers

> > in case one is down.

> >

> > I fought with the AuthLDAPURL directive but with no success.

>

>   AuthName "something good"

>   AuthType Basic

>   AuthLDAPURL ldap://a.ldap.bsws.de

> b.ldap.bsws.de/ou=..?uid?sub?objectclass=... AuthLDAPBindDN

> cn=http-auth,...

>   AuthLDAPBindPassword ...

>   AuthLDAPStartTLS off  # broken... stupid OpenLDAP

Argh, is this because of AuthLDAPStartTLS that I couldn't make it work?

I will try it just out of curiosity but I've just configured my OpenLDAP

servers to reject non-TLS connexions.

I don't like the idea of cleartext passwords on the wire ...

Thierry.