Re: LDAP connection failure: what does "not authoritative" mean?

On Mon, Nov 25, 2024 at 4:30 PM <[email protected]> wrote:
>
> I'm trying to do basic authentication via LDAP to Active Directory.
> HTTPD logs this:
>
> [Mon Nov 25 16:02:47.362939 2024] [authnz_ldap:debug] [pid 6205:tid 6205] mod_authnz_ldap.c(548): [client 2600:381:cb60:bf0:c6bb:b64d:24e:24da:46526] AH01691: auth_ldap authenticate: using URL ldap://ads.iu.edu/ou=Accounts,DC=ads,DC=iu,DC=edu?CN?one
> [Mon Nov 25 16:02:47.381431 2024] [authnz_ldap:debug] [pid 6205:tid 6205] mod_authnz_ldap.c(569): [client 2600:381:cb60:bf0:c6bb:b64d:24e:24da:46526] AH01694: auth_ldap authenticate: user mwood authentication failed; URI /nagios/ [LDAP: ldap_start_tls_s() failed][Connect error] (not authoritative)

This refers to AuthLDAPBindAuthoritative rather than something the
LDAP server returned.  It means other authentication modules will get
a chance if configured (none are in your config, it would be a list of
AuthBasicProvider)

I think "connect error" is the only part coming from the LDAP SDK.

LDAPLibraryDebug might help get you some context during the failure.