Re: Authentication Caching

Tech-Archive recommends: Fix windows errors by optimizing your registry

David wrote:
The answer to your question regarding Windows 2003 DC caching the previous password is no. Once the password is changed in active directory, AD will go by the current password for any application that queries AD for authentication.

It sounds like an issue with the Linux or Apache config. If you have the LDAP cache on the linux/Apache machine set for 600s, does it accept your new password after 10 minutes?

You might need to post this question to an Apache or Linux list.

Good luck.


Hi David,

Yes have already posted to the openldap group. I had come to the same conclusion myself. So just to be clear, theres no "remembering" old passwords (except for denying password duplication on change) for Authentication?

There is caching turned on, but even after 30mins the old passwords work fine. Even if I stop/start httpd completely. But the original (1 of 3 password switches) did stop working after about 50mins. So I'm still trying to research.

It has the same effect with a Disabled account. If I disable the account, I can still login using the old password. However if I kick Apache at this point, afterwards I cant. So its very confusing whats going on.
.

Relevant Pages

  • Re: problem with AuthCookieName and Apache
    ... > I has a problem with my configuration of AuthCookieName and Apache, ... This is due to the stack-like module semantics in apache 1.3. ... As mod_auth_cookie fakes basic authentication information, ... Have you checked the cookie is actually available? ...
    (Debian-User)
  • Re: Mod_python vs. application server like CherryPy?
    ... WSGI being portability it effectively ignores practically everything ... that Apache has to offer. ... WSGI auth middleware already supports more auth methods than apache2 itself. ... authentication mechanisms, both of which are in Apache by default. ...
    (comp.lang.python)
  • Re: Authentication Caching
    ... Once the password is changed in active directory, AD will go by the current password for any application that queries AD for authentication. ... If you have the LDAP cache on the linux/Apache machine set for 600s, does it accept your new password after 10 minutes? ... You might need to post this question to an Apache or Linux list. ...
    (microsoft.public.windows.server.general)
  • Re: Apache 2.2 mod_ldap refusing to work over SSL/TLS (solved)
    ... The current status is that authentication works without problems when ... certificate verification works without any problems. ... I can use SSL and TLS with ldapsearch, there is no reason why it ... shouldn't be working from apache. ...
    (freebsd-questions)
  • Re: Web Authentication
    ... pimp mastermind wrote: ... I use Apache 1.3 for web access. ... but i dont know any other ways of authentication. ...
    (Security-Basics)