Re: Authentication Caching

The answer to your question regarding Windows 2003 DC caching the previous password is no. Once the password is changed in active directory, AD will go by the current password for any application that queries AD for authentication.

It sounds like an issue with the Linux or Apache config. If you have the LDAP cache on the linux/Apache machine set for 600s, does it accept your new password after 10 minutes?

You might need to post this question to an Apache or Linux list.

Good luck.

--
Take care,

David
http://dcraige27.blogspot.com

"Adrian Marsh (NNTP)" <adrian.marsh@xxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:#Bksr4ORJHA.1908@xxxxxxxxxxxxxxxxxxxxxxx
Hi All,

I need to check something very basic. When using a 2003 DC for Authentication, does the system allow a setting for permitting the last password as "good" for a period of time?

Heres why, I have Apache on a linux machine authenticating users via LDAP. Its set to cache for 600s, so I dont overload the server unnecassarily.

However, if I change my password on my PC, close my browser, and log back in, and then goto the site, I get prompted (new session) by Apache. If I enter my old password, it still gets the "ok" from the DC and allows me access. Which isnt what I expected or wanted. If I close the browser, repeat and use the new password, it also authenticates ok. Using any other passwords fail.

So is there a cache somewhere on the LDAP service in the DC ?

Thanks,

Adrian

.

Relevant Pages

  • Re: LDAP Authentication from Linux
    ... doesn't the LDAP module in Apache require a secure connection on most recent Linux systems? ... Moving the ldap45457 user into the same OU as the rest of my normal users, and then changing apache to the below, and also adding "List Contents" Read permissions to that OU, as per what I read here for anonymous access. ... user marsh authentication failed; ...
    (microsoft.public.windows.server.sbs)
  • [VulnWatch] Digital Armaments: Apache auth_ldap module Multiple Format Strings Vulnerability
    ... Apache auth_ldap module Multiple Format Strings Vulnerability ... popular web server. ... It also has support for LDAP over SSL, ... permissions while still using LDAP for authentication. ...
    (VulnWatch)
  • Re: Use Windows 2000 User Authentication for Apache
    ... auth_ldap works perfectly with apache and win2000. ... With ldap, no problem at all. ... stores the queried credentials in a cache and accelerates the whole authentication ... >> worth a try), Win2K Domain Controllers run an LDAP server, Apache may be ...
    (comp.os.linux.security)
  • Re: LDAP Authentication from Linux
    ... Moving the ldap45457 user into the same OU as the rest of my normal users, and then changing apache to the below, and also adding "List Contents" Read permissions to that OU, as per what I read here for anonymous access. ... user marsh authentication failed; ... Depending how you have LDAP set up, remember that the user you configure must have privileges to query AD. ... and if I bind using a Domain Admin account then all is well and I can login. ...
    (microsoft.public.windows.server.sbs)
  • Re: Directory Services, LDAP or similar
    ... In other projects, we managed the user authentication by creating tables that define all users and its allowed capacities, then the application queryies that data to verify if a user has access to some feature or not. ... The above ID and password are sent to the service at login time. ... They are using Novell eDirectory at the enterprise level; yes it's LDAP. ... We already do that for three different DB servers; ...
    (borland.public.delphi.non-technical)