SID-02028: Unable to access bin/configure after LDAP auth applied

Status:	Answered	TWiki version:	6.0.1	Perl version:	5.8.8
Category:	CategoryAuthentication	Server OS:	Red Hat Enterprise Linux Server release 5.5 (Tikanga)	Last update:	10 years ago

Hi Peter and the team (assuming there is a team),

Great product in Twiki by the way. We're running version 4.3.1 (non LDAP auth).

I'm working towards migrating to the latest version. So far I've successfully installed it on another server and restored our old twiki data to it. I've also added SSL and LDAP to manage auth (not using LDAPContrib) as per:

<Directory "/path/wiki/bin">

    AllowOverride All
    Allow From All
    Options Indexes FollowSymLinks Includes ExecCGI
    SetHandler cgi-script
    AuthBasicProvider ldap
    AuthzLDAPAuthoritative off
    AuthType Basic
    AuthName "Wiki: Enter Your Network Username/Password"
    AuthLDAPBindDN "XXXXXXXX"
    AuthLDAPBindPassword XXXXXXXX
    AuthLDAPURL "XXXXXXXXXX"
   AuthLDAPGroupAttribute department
   AuthLDAPGroupAttributeIsDN off
   require valid-user

</Directory>

LDAP auth works fine for accessing every other page except configure. So it seems I can't now access the bin/configure web section since applying LDAP. We do still have a .htpasswd file which has all the old users in, I've tried these, they don't work, I've tried the admin, no joy, I've created a new internal admin, still no luck. Any advice?

Regards Neil

-- Neil Price - 2015-02-24

Discussion and Answer

I have not used the AuthLDAP approach, but this seems more like an Apache configure question. Try to require authenticated user just for the TWiki scripts, except configure. Something like this inside the <Directory> directive:

<FilesMatch "(attach|edit|manage|rename|save|upload|mail|logon|rest|.*auth).*">
   require valid-user
</FilesMatch>

-- Peter Thoeny - 2015-02-24

Closing this question after more than 30 days of inactivity. Feel free to reopen if needed. Consider engaging one of the TWiki consultants if you need timely help. We invite you to get involved with the community, it is more likely you get community support if you support the open source project!

-- Peter Thoeny - 2015-12-03

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.