Hosting Provided By

Bug#463278: apache2.2-common: mod_auth_ldap doesnt work with LDAPVerifyServerCert Off

From: Hagen Montag <hagk(at)hagk.de>
Date: Wed Jan 30 2008 - 13:55:42 EST

Package: apache2.2-common
Version: 2.2.3-4+etch3
Severity: normal

The usage of

LDAPVerifyServerCert Off

does normally disable the verfication of valid SSL certificates, if an auth-rule connect to a LDAP-server with ldaps://0.0.0.0:636/....

The debian package result with an entry in the slapd.log

Jan 30 18:37:25 hostname slapd[3087]: conn=3323 fd=14 ACCEPT from
IP=127.0.0.1:42555 (IP=0.0.0.0:636)
Jan 30 18:37:25 hostname slapd[3087]: conn=3323 fd=14 closed (TLS negotiation

failure)

The apache configuration is approved with other distros. The auth-configuration works w/o SSL.
The ldapsearch-util does works with a SSL connection.

System Information: Debian Release: 4.0 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.18-5-686-bigmem Locale: LANG=de_DE@euro, LC_CTYPE=de_DE@euro (charmap=ISO-8859-15)

Versions of packages apache2.2-common depends on:

ii  apache2-utils              2.2.3-4+etch3 utility programs for webservers
ii  libmagic1                  4.17-5etch3   File type determination library us
ii  lsb-base                   3.1-23.2etch1 Linux Standard Base 3.1 init scrip
ii  mime-support               3.39-1        MIME files 'mime.types' & 'mailcap
ii  net-tools                  1.60-17       The NET-3 networking toolkit
ii  procps                     1:3.2.7-3     /proc file system utilities

apache2.2-common recommends no packages.

no debconf information

Do you need help?

--

To UNSUBSCRIBE, email to debian-apache-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org Received on Wed Jan 30 14:21:59 2008

This message: [ Message body ]
Next message: Martin Sebald: "Bug#463338: "/etc/init.d/apache2 restart" fails"
Previous message: calvarado(at)capitalhotelswdc.com: "Beacon Hotel~Valentine's Day Sweetheart Package"
Next in thread: Debian Bug Tracking System: "Bug#463278: marked as done (apache2.2-common: mod_auth_ldap doesnt work with LDAPVerifyServerCert Off)"
Reply: Debian Bug Tracking System: "Bug#463278: marked as done (apache2.2-common: mod_auth_ldap doesnt work with LDAPVerifyServerCert Off)"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Mar 19 2008 - 03:00:23 EDT