Apache - Can not get mod_authnz_ldap to work with mod_shib_24

[Mouchoir]

Hi! I have been scratching my head, getting LDAP authentication to work when
mod_shib_24.so is included on Apache 2.4.

In Apache, I have:
 -  a "catch-all" <Location /> with shibboleth authentication enabled.
-  a API at <LocationMatch /api/[0-9]*/> with LDAP authentication enabled.

When I try to access the API with a correct set of LDAP credentials, it
works just fine using Apache 2.2 / mod_shib_22.so.
However, trying Apache 2.4 / mod_shib_24.so gives me a HTTP 401. I have to
disable mod_shib_24.so in order to get it to work.

This is the Apache log for a request to "/api/1/" (LDAP auth) when
mod_shib_24.so is disabled - I get successfully authenticated using my LDAP
credentials:

When enabling mod_shib_24.so, things do not go so well:

It seems like these log entries reveal the "culprits":

This is my Apache config (I comment out the shibboleth parts when
mod_shib_24.so is disabled):

Does anybody have any advice on how I can get LDAP authentication to work
when mod_shib_24.so are enabled?

Cheers,
 - Terje



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Apache-Can-not-get-mod-authnz-ldap-to-work-with-mod-shib-24-tp7611792.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.