Author Topic: How to enable OpenLDAP anonymous bind  (Read 8793 times)

rauno

  • Zen Apprentice
  • *
  • Posts: 3
  • Karma: +0/-0
    • View Profile
How to enable OpenLDAP anonymous bind
« on: January 06, 2013, 09:14:19 pm »
Hi,
Im using OpenLDAP to authenticate my apache webpage. At the moment the authentication part is described in .htaccess file and everything works. But I want to use Anonymous bind. I have read that if I do not use lines AuthLDAPBindDN and AuthLDAPPassword, then it should use anonymous bind. But then I dont get any login window and webpage loads instantly.
OpenLDAP is configured by Zentyal only.
How can I enable Anonymous bind?
.htaccess:
Code: [Select]
order deny, allow
Deny from All
Authname "Rauno Secure Sales"
AuthType Basic
AuthBasicProvider ldap
AuthzLDAPAuthoritative on
AuthLDAPURL ldap://127.0.0.1:390/ou=Users,dc=raunolehiste,dc=ee?uid
AuthLDAPBindDN cn=zentyal,dc=raunolehiste,dc=ee
AuthLDAPBindPassword hashedpassword
Require valid-user
Satisfy any

christian

  • Guest
Re: How to enable OpenLDAP anonymous bind
« Reply #1 on: January 06, 2013, 09:51:21 pm »
Could you please explain what you expect with LDAP anonymous bind from Apache? I mean in term of behaviour and goal.

rauno

  • Zen Apprentice
  • *
  • Posts: 3
  • Karma: +0/-0
    • View Profile
Re: How to enable OpenLDAP anonymous bind
« Reply #2 on: January 06, 2013, 10:05:20 pm »
I want to get my authentication to work with htaccess file like this:
Code: [Select]
Authname "Rauno Secure Sales"
AuthType Basic
AuthBasicProvider ldap
AuthLDAPURL ldap://127.0.0.1:390/ou=Users,dc=raunolehiste,dc=ee?uid
Require valid-user
When I go to page I should get login window asking username and password that have to match OpenLDAP user. If they are correct the user would see the webpage
« Last Edit: January 06, 2013, 10:16:17 pm by rauno »

christian

  • Guest
Re: How to enable OpenLDAP anonymous bind
« Reply #3 on: January 06, 2013, 11:04:34 pm »
Please check slapd.conf for:
- disallow bind_anon
- require authc
- allow bind_anon_cred

And tell us what you find.
« Last Edit: January 06, 2013, 11:07:35 pm by christian »

rauno

  • Zen Apprentice
  • *
  • Posts: 3
  • Karma: +0/-0
    • View Profile
Re: How to enable OpenLDAP anonymous bind
« Reply #4 on: January 07, 2013, 01:05:03 am »
I copied /usr/share/slapd/slapd.conf to /etc/ldap/slapd.conf, then I added allow bind_anon_cred to /etc/ldap/sldap.conf
disallow bind_anon and require authc are NOT in slapd.conf

christian

  • Guest
Re: How to enable OpenLDAP anonymous bind
« Reply #5 on: January 07, 2013, 07:09:37 am »
I copied /usr/share/slapd/slapd.conf to /etc/ldap/slapd.conf, then I added allow bind_anon_cred to /etc/ldap/sldap.conf
disallow bind_anon and require authc are NOT in slapd.conf

And so what  ???
Furthermore, you may have to read this.
Zentyal configuration is based on template. I'm afraid your implementation doesn't work, does it?