perl-ldap-dev

Using Net::LDAP with AuthTicket

[Gary Ashton-J. <gas...@f2...>]

I wish to use an LDAP directory for authentication in the AuthTicket.pm
module. Currently AuthTicket uses a MySQL database to hold valid users and
their encrypted passwords.

I thought it would be simply a case of copying the relevant lines from the
handler method in AuthNetLDAP (just as Mark Wilcox did from AuthPerLDAP)
into the check_credentials subroutine in AuthTicket. However I get the
following lines in my Apache error_log at startup and the authentication
fails with an error 1 (BTW how do I use Net::LDAP::Constants?):

.
.
.
[Tue Jan 30 16:32:27 2001] ASN1.pm: Constant subroutine opUTF8 redefined at
/usr
/lib/perl5/site_perl/5.005/Convert/ASN1.pm line 48.
[Tue Jan 30 16:32:27 2001] ASN1.pm: Constant subroutine opANY redefined at
/usr/
lib/perl5/site_perl/5.005/Convert/ASN1.pm line 48.
[Tue Jan 30 16:32:27 2001] ASN1.pm: Constant subroutine opCHOICE redefined
at /usr/lib/perl5/site_perl/5.005/Convert/ASN1.pm line 48.
[Tue Jan 30 16:32:29 2001] [notice] Apache/1.3.14 (Unix) mod_perl/1.24_01
configured -- resuming normal operations

AuthNetLDAP.pm works correctly by itself and I can run a standalone Perl
script which just calls the methods in Net::LDAP so I think I've got all the
parameters to LDAP correct.

I just need to know what other lines from AuthNetLDAP I need to copy to get
AuthTicket to work. Any help appreciated.

(PS Has Mark Wilcox or anyone else got any further with
Apache::AuthCookieNetLDAP which is basically what this is all about?)

Cheers

Gary Ashton-Jones

Re: Using Net::LDAP with AuthTicket

[Mark W. <mew...@un...>]

Nothing crosses my mind.

And unfortunately, no I haven't had a chance to do anything with the cookie
module.

BTW I'm leaving UNT to start a new job as a consultant with WebCT
(www.webct.com). I plan to keep on trucking with Net::LDAP, just don't know how
frequent I'll be :).

My new email is ma...@mj...

Mark


Gary Ashton-Jones wrote:

> I wish to use an LDAP directory for authentication in the AuthTicket.pm
> module. Currently AuthTicket uses a MySQL database to hold valid users and
> their encrypted passwords.
>
> I thought it would be simply a case of copying the relevant lines from the
> handler method in AuthNetLDAP (just as Mark Wilcox did from AuthPerLDAP)
> into the check_credentials subroutine in AuthTicket. However I get the
> following lines in my Apache error_log at startup and the authentication
> fails with an error 1 (BTW how do I use Net::LDAP::Constants?):
>
> .
> .
> .
> [Tue Jan 30 16:32:27 2001] ASN1.pm: Constant subroutine opUTF8 redefined at
> /usr
> /lib/perl5/site_perl/5.005/Convert/ASN1.pm line 48.
> [Tue Jan 30 16:32:27 2001] ASN1.pm: Constant subroutine opANY redefined at
> /usr/
> lib/perl5/site_perl/5.005/Convert/ASN1.pm line 48.
> [Tue Jan 30 16:32:27 2001] ASN1.pm: Constant subroutine opCHOICE redefined
> at /usr/lib/perl5/site_perl/5.005/Convert/ASN1.pm line 48.
> [Tue Jan 30 16:32:29 2001] [notice] Apache/1.3.14 (Unix) mod_perl/1.24_01
> configured -- resuming normal operations
>
> AuthNetLDAP.pm works correctly by itself and I can run a standalone Perl
> script which just calls the methods in Net::LDAP so I think I've got all the
> parameters to LDAP correct.
>
> I just need to know what other lines from AuthNetLDAP I need to copy to get
> AuthTicket to work. Any help appreciated.
>
> (PS Has Mark Wilcox or anyone else got any further with
> Apache::AuthCookieNetLDAP which is basically what this is all about?)
>
> Cheers
>
> Gary Ashton-Jones

RE: Using Net::LDAP with AuthTicket

[Gary Ashton-J. <gas...@f2...>]

It's small consolation but I replaced the calls to Net::LDAP with calls to
Mozilla::LDAP::Conn (see AuthPerLDAP.pm) and AuthTicket now works as I want
it (authenticates and no complaints about redefined subroutines in the
Apache error_log). I'll package my changes up as a subclass to AuthTicket
(AuthTicketLDAP perhaps?) and make it available on CPAN. This is bypassing
the problem, not fixing it unfortunately.

The importance of this version of AuthTicket is that it allows single-point
sign-on and authorisation across multiple domains. The AuthCookie/AuthTicket
pair as they exist only allow single-point sign-on within one domain
(tickets are placed in cookies which can only be read within the originating
domain).

Rgds

Gary

-----Original Message-----
From: per...@li...
[mailto:per...@li...]On Behalf Of Mark
Wilcox
Sent: Wednesday, 31 January 2001 2:52 AM
To: Gary Ashton-Jones
Cc: per...@li...
Subject: Re: Using Net::LDAP with AuthTicket


Nothing crosses my mind.

And unfortunately, no I haven't had a chance to do anything with the cookie
module.

BTW I'm leaving UNT to start a new job as a consultant with WebCT
(www.webct.com). I plan to keep on trucking with Net::LDAP, just don't know
how
frequent I'll be :).

My new email is ma...@mj...

Mark


Gary Ashton-Jones wrote:

> I wish to use an LDAP directory for authentication in the AuthTicket.pm
> module. Currently AuthTicket uses a MySQL database to hold valid users and
> their encrypted passwords.
>
> I thought it would be simply a case of copying the relevant lines from the
> handler method in AuthNetLDAP (just as Mark Wilcox did from AuthPerLDAP)
> into the check_credentials subroutine in AuthTicket. However I get the
> following lines in my Apache error_log at startup and the authentication
> fails with an error 1 (BTW how do I use Net::LDAP::Constants?):
>
> .
> .
> .
> [Tue Jan 30 16:32:27 2001] ASN1.pm: Constant subroutine opUTF8 redefined
at
> /usr
> /lib/perl5/site_perl/5.005/Convert/ASN1.pm line 48.
> [Tue Jan 30 16:32:27 2001] ASN1.pm: Constant subroutine opANY redefined at
> /usr/
> lib/perl5/site_perl/5.005/Convert/ASN1.pm line 48.
> [Tue Jan 30 16:32:27 2001] ASN1.pm: Constant subroutine opCHOICE redefined
> at /usr/lib/perl5/site_perl/5.005/Convert/ASN1.pm line 48.
> [Tue Jan 30 16:32:29 2001] [notice] Apache/1.3.14 (Unix) mod_perl/1.24_01
> configured -- resuming normal operations
>
> AuthNetLDAP.pm works correctly by itself and I can run a standalone Perl
> script which just calls the methods in Net::LDAP so I think I've got all
the
> parameters to LDAP correct.
>
> I just need to know what other lines from AuthNetLDAP I need to copy to
get
> AuthTicket to work. Any help appreciated.
>
> (PS Has Mark Wilcox or anyone else got any further with
> Apache::AuthCookieNetLDAP which is basically what this is all about?)
>
> Cheers
>
> Gary Ashton-Jones

Re: Using Net::LDAP with AuthTicket

[Graham B. <gb...@po...>]

On Wed, Jan 31, 2001 at 01:50:56PM +1100, Gary Ashton-Jones wrote:
> It's small consolation but I replaced the calls to Net::LDAP with calls to
> Mozilla::LDAP::Conn (see AuthPerLDAP.pm)

That is unfortunate as the Mozilla module does not seem to be well supported.

The errors you are seeing below would only happen if the ASN1.pm file
was included multiple times. This would only happen if %INC was cleared.
That should not happen, but the attached patch should fix it

Graham.