* Thierry Lacoste  [2007-06-12 15:27]:

quoted text
> On Tuesday 12 June 2007 15:07, Henning Brauer wrote:

> > * Thierry Lacoste  [2007-06-12 14:35]:

> > > Hello,

> > >

> > > I'm using mod_auth_ldap-1.6.0p3 on OpenBSD 4.1

> > > and I'd like to make it authenticate on 2 ldap servers

> > > in case one is down.

> > >

> > > I fought with the AuthLDAPURL directive but with no success.

> >

> >   AuthName "something good"

> >   AuthType Basic

> >   AuthLDAPURL ldap://a.ldap.bsws.de

> > b.ldap.bsws.de/ou=..?uid?sub?objectclass=... AuthLDAPBindDN

> > cn=http-auth,...

> >   AuthLDAPBindPassword ...

> >   AuthLDAPStartTLS off  # broken... stupid OpenLDAP

> Argh, is this because of AuthLDAPStartTLS that I couldn't make it work?

> I will try it just out of curiosity but I've just configured my OpenLDAP

> servers to reject non-TLS connexions.

> I don't like the idea of cleartext passwords on the wire ...

neither do I, nor do i fully remember what the problem was. maybe time

to retry.
--

Henning Brauer, hb@bsws.de, henning@openbsd.org

BS Web Services, http://bsws.de

Full-Service ISP - Secure Hosting, Mail and DNS Services

Dedicated Servers, Rootservers, Application Hosting - Hamburg & Amsterdam