Hello,

Despite the documentation, multiple servers listed in the AuthLDAPUrl,
in the form:

AuthLDAPUrl ldaps://111.222.333.444
111.222.333.445/ou=People,o=MyOrg?uid?sub?(objectclass=posixAccou
nt)

.... causes this error to appear in the logs:

Syntax error on line 19 of /opt/apache2/conf/conf.d/vhost-foo.conf:
AuthLDAPURL takes one argument, URL to define LDAP connection. This
should be an RFC 2255 complaint\nURL of the form
ldap://host[:port]/basedn[?attrib[?scope[?filter]]].\n<ul>\n<li>Host is
the name of the LDAP server. Use a space separated list of hosts \nto
specify redundant servers.\n<li>Port is optional, and specifies the port
to connect to.\n<li>basedn specifies the base DN to start searches
from\n<li>Attrib specifies what attribute to search for in the
directory. If not provided, it defaults to <b>uid</b>.\n<li>Scope is the
scope of the search, and can be either <b>sub</b> or <b>one</b>. If not
provided, the default is <b>sub</b>.\n<li>Filter is a filter to use in
the search. If not provided, defaults to
<b>(objectClass=*)</b>.\n</ul>\nSearches are performed using the
attribute and the filter combined. For example, assume that the\nLDAP
URL is <b>ldap://ldap.airius.com/ou=People,
o=Airius?uid?sub?(posixid=*)</b>. Searches will\nbe done using the
filter <b>(&((posixid=*))(uid=<i>username</i>))</b>, where
<i>username</i>\nis the user name passed by the HTTP client. The search
will be a subtree search on the branch <b>ou=People, o=Airius</b>.

I take it this documented feature isn't actually implemented yet?

Thanks,

Brent

Brent Kearney wrote:

> AuthLDAPUrl ldaps://111.222.333.444
> 111.222.333.445/ou=People,o=MyOrg?uid?sub?(objectclass=posixAccou
> nt)
>
> ... causes this error to appear in the logs:
>
> Syntax error on line 19 of /opt/apache2/conf/conf.d/vhost-foo.conf:
> AuthLDAPURL takes one argument, URL to define LDAP connection.

Arguments with spaces need to be quoted.

--
Dave Carrigan
Seattle, WA, USA
dave@rudedog.org | http://www.rudedog.org/ | ICQ:161669680
UNIX-Apache-Perl-Linux-Firewalls-LDAP-C-C++-DNS-PalmOS-PostgreSQL-MySQL