Edit: /usr/lib/apache2/modules/mod_authnz_ldap.so (55696B)
ELF > @ P @ 8 @ f f 6 6 p p p @ $ $ Std Ptd Qtd Rtd p p p GNU GNU M}ۖP1ra\, > 0 > eL + Y , ] m + : $ Z < h f t w w G 6 J E , F " t U @ p __gmon_start__ _ITM_deregisterTMCloneTable _ITM_registerTMCloneTable __cxa_finalize authnz_ldap_module apr_pstrdup apr_hash_get strlen apr_pstrndup apr_table_get apr_xlate_open __stack_chk_fail apr_palloc apr_thread_mutex_create apr_array_make apr_pstrcat __ctype_toupper_loc apr_table_setn strcmp strcasecmp apr_array_push ap_expr_parse_cmd_mi apr_ldap_url_parse memset strncasecmp ap_log_error_ apr_pstrmemdup strtol ap_pregcomp strncmp apr_tokenize_to_argv ap_server_root_relative ap_get_exec_line ap_find_linked_module ap_pcfg_openfile apr_hash_make ap_cfg_getline ap_getword_conf ap_str_tolower apr_hash_set ap_cfg_closefile apr_dynamic_fn_retrieve ap_register_auth_provider ap_hook_post_config ap_hook_optional_fn_retrieve apr_xlate_conv_buffer apr_snprintf strchr ap_log_rerror_ ap_regexec apr_table_set ldap_err2string ap_pregsub apr_pool_cleanup_null apr_pool_cleanup_register ap_expr_str_exec apr_pool_cleanup_kill apr_thread_mutex_lock apr_thread_mutex_unlock ap_getword ap_set_string_slot ap_set_flag_slot libldap-2.5.so.0 libc.so.6 mod_authnz_ldap.so OPENLDAP_2.5 GLIBC_2.4 GLIBC_2.2.5 GLIBC_2.3 "
) ii
6 ui @ ii
L p ' x p' y 0/ n 0/ Pe 0/ S 0/ H 0/ `< X / ( 0 8 4 P @ X ̷ x 8 3 ( 8 M ( . @ H c P 4 h p | x . x - ɸ ( @ ߸ 0 8 X ` h 04 , A t ( { P x * 8 ; ; ; ` * * * * @ * * * ! / > 8 : ( 0 8 @ H P X
` h p
x " # $ ( % 0 & 8 ' @ ( H ) P + X , ` - h . p 0 x 1 2 3 4 5 6 7 9 < = HH HtH 5 % h h h h h h h h q h a h Q h
A h 1 h ! h
h h h h h h h h h h q h a h Q h A h 1 h ! h h h h h! h" h# h$ h% h& h' q h( a h) Q h* A h+ 1 h, ! h- h. h/ h0 h1 h2 h3 h4 h5 %U D %m D %e D %] D %U D %M D %E D %= D %5 D %- D %% D % D % D %
D % D % D % D % D % D %ݹ D %չ D % D %Ź D % D % D % D % D % D % D % D % D %} D %u D %m D %e D %] D %U D %M D %E D %= D %5 D %- D %% D % D % D %
D % D % D % D % D % D %ݸ D %ո D % D %Ÿ D H= H H9tH Ht H=y H5r H)HH?HHHtH Htf D =5 u+UH=j Ht H=n d
] w H 1Hff. HH H H Hc@HHHHXL@`Ht$LJMttQu
H@0HcRL1ff. @ ISHI H; t0HK1fH˃HIH; uL g
u L[ H@E1HL[ @ ATIUHHtQH=· HHHHtHL]A\t @ HHv}-t,H1]A\fHLH5 ]A\:f. HLH=A HHHHtzff. fSHH5l HH dH%( HD$15HthH;HHƄt!H ,t[;tVQHuH;HHt"H H5 Hu H$f D 1HT$dH+%( u H[ f D AT UHS1iH1HxHIHǀ HHH) HI,$I|$H
H
I$ HQ AD$| I$ H ID$H
ID$ ID$X ID$` AD$h AD$P ADŽ$ I$ HxHHH HH@I HH)QHH I$ I$ LID$l ID$t []A\ff. fAWAVL5g AUATUHSH8H H t$(Hc@L$H HH@H$
tM$ LIT$8H H<$ HL H HD$, 1HD$Ld$Hl$ HD$1LH81IHD$Md A,$@t%1f D HA HA, @uH$LLHH HHDD$(u_HD$HxpHP8HtH4HT$ /HT$ tFHHHM D$, D$,H8[]A\A]A^A_ D HD$HP8 D Hl$H$H} H4*D$, H8 HD$HP8 UHHSHH5 Ht}H5 HtjH5 HktgH5 HXtdH5y HEt H5m HAHa Eu CP H1[] CP 1H[]CP H1[]CP H1[] ATHa USHH
~ []A\ @ HH{@HII$1[]A\f D ATHa USHH
~ []A\ @ HPH{@HII$1[]A\f D UE1Hպ SHHdH%( HD$1H HH$ DH=HH$Ht1H{HH1H59a 1
HT$dH+%( uH[] HU D AWAVIAUIATIUSHLH(H@dH%( HD$1HL$HT$|t8HD$L HD$dH+%( H(L[]A\A]A^A_f. I|$@LHKHCH HD$I|$@H E1Hp1#HT$HCHr He HtI|$@0HT$HJ(HC(H H H9 Hy f HH| uDzMcII|$@LL1HHT$HC8HJ(H1Ht4E1 D I|$@J,8IHT$HE HB(J48HC8HuH HC0B0 Hj8EC@H5 Ht} ( I|$@H5HCHMt@ E1@ @ D@0H=G LX8H5@ HEH=8 At"H=3 EtAH=( L* IELP(L# MtMHV ASWH=$ APE1p Q pHI^ AUP1HPE1 Ay(M H Ef D HT$HZ HrHtI|$@qHT$HC ǃ aHI|$@HuHPvLH=W 1uǃ f D LH=* L] t)f A SHH
1 1[ff. @ AUIATI1UHSHLHH@Ht#H 1L H[]A\A] H}@HLE1[H
H5] ]A\A]f AUATIUHHSHHdH%( HD$1~ H5/ Ht IHI HcPH H?L,HD$( Pf H@H Eu|HcxI HH E| H MJ } P IuH E IMXLt$@ME`E HAU EMPLA Py HD$Hm PXY I HX HH Hc 1 LM1LL4H
PI H
HH Hc 1 V H=٢ tpLHHD$t^H%I?HT@HD$0HHT$8HT$HT$1HH|$HT$0HHLD$8HD$HL$tHHsMU(MM8LEE@IUVHt$0VQLAVHt$( H|$(AH E H EEhHcPI E HR HH I}HH5w u
AP AA L Hy B06fI xUH HHtM 9xE 1H$H dH+%( HX []A\A]A^A_ H xf D IGH HL HHt\Hc<1 xS 1f. H x I Hu IGH Hx xE .f. HME1 Hv PH=hu 1[] f. HuIGH H x# @ I LL MtbI HtVI LL$tGE1L
LLL$b LI HHL$H5
v IuHL$IHS AVME1P * 1H={t AYAZyfHt$(I?#I?LHI?HHCA}lHCt
HI8 1LIUpHt;u7 m ME1Hҝ H=s DXHS RP1DdY^H DXI Ex+H HHt#Ic
x H xe AuME1 H8R $ H=Ws P1A[X @ I Ht HHtD 9x<; @ IGH HuIGHH Ht 9yH xuHME1 HP PD I H0 HH 9 HME1 HtP PHME1 HP H=*r P1AZ1A[ @ IGH Hl HHHc<1 1DZHME1H @ H=q SPHD$pHHEQ AP ATP1H0 Hg HH DHME1H 9 H="q SPHD$pHHLP AP ATP1H0 D H' xa IGH HIGH H xB IGH HIGH I I?ML
HH{s D IGH IGH HP ATDMPE11 v H=o xX Z @ IGH HHIGHH Ht 9?H {fIGH Hl HH< D HIGH HsIG_fIGH HIGx IGH Hy HHyIcˀ<
l
Kf. HME1 HjM P[ IGHH H{Hc<1 nH@ 08 D IGHH H[Hc<1 NH@ 0f D IGH HIGHH Ht 9H KfIGHH H_< PIGH H HHI< xIGH H&IGH IGH HIGhIGHP HIcˀ<
H@ IGHH Ht< wf. AWAVAUATUSH H $ H H $ HHH- H dH%( H$8 1HcEH8 L,H H HD$( HD$ 2 K| H{ IQ I|H
m I?HKHIPI8 8 X M IE Ht 8 UI H HH Hc 1 t-HME1 HM PH=k 1{_AX1H$8 dH+%( HH []A\A]A^A_ D LHT$(LIHD$(HW LHSLC0MIM LD ǃ HcUI ^ H5 HHR F Lt$ Lt$ I?LzIH 8 LHSLC0LIM ǃ HcUI H6 HH {+HUMPH N E1 At$H H={j P1H : HHIE1HLK P; @ HW x HQK UME1A@ H=i P1xA[XMuUI x.HE HHt&Hc 1xf. H x' I? f II@I8 HD$0Ht"HI1LLT$H$@LT$H$HIrLK8DC@HK(HSLT$LVHt$(VLP֓ LT$ H tyUI H~ HH Hc 1 At$HME1 HNJ P f D HcUI L$LHt$I?0L$I8 IIRf UPHJ MPE1 & Hp xF H7 x IGH H=IGH 0 HuIGH Hu IGH x @ IGH HIGHH HtHME1 HH H=Jg P1AYAZf D UI H HH! Hc 1 HME1 HJ AP H=f A8 P1 g PH=Y 18XZMEVH E9 H HH- Ic
f. H{H H5Z H H0H5Z H{H0 D H{OH SH5`Z H H0=H5QZ H{H0 D HEH H H8 JHf. HEH HHEHH Ht H f. H xn H} Jf II@H8 HD$0Ht"HI1HLT$H$LT$H$HIrLK8DC@HK(HSLT$HVHt$0VLP LT$ H AVH H HH Hc 1 &AuHIE1 H< { Pf D AVPH< IPE1 f D HEH HHEH f D IcVL,$IH H HH
H A HEHP HwIc̀<
jH@ A D HEHH H< yIcVH L$LHt$ H} L$IH8 IBH; DIE1L$ H=U t$P1GAXEfAYH L$G HE, H x HEH HHEH H x(HEH HHEH HEH H HHtf< xPJHEH H HHtkHc<1 xb 1f HuHEH Hu HEH x @ HuHEH Hu HEH x @ H HH HAVIPE1 jH=S AuHHD$00Hc; P1cH0;HIE1 HD8 DҾm PH=S 1-A_X] D HEHx HH t @ HuHEH Hu HEH x @ HEH H HHIc<1 1 L$HAVIPHA9 E1 j H=R AuHLT$ A2P1GH0 f D HEH H HHAIcʀ<
4
HEH Hq HHHc<1 1HEHH HIc<1 H@ 0HEH HHEHP HtIc
H HEH HEHEH 8HEH HdHEHH HC_2HEHP HTIcʀ<
GH@ HEH HHEWHEHH H< -HEHH HHc<1 H@ 0DHEHH H Hc<1 H@ 0U=ff. f AWAVAUATUSH H $ H H $ H8H _z H dH%( H$( 1HcCH8 L4H L=f D HEH HuHEHH Ht Hc 1yH @ xHIE1 Hk6 M P HQ5 SIE1@ $ H=TL P1ѼAYAZX SPH5 IPE1 D HcSH L $L Ht$H} 跻L $IH8 IC HE1I H4 H=K * P1,_AXl @ H z xSf D HEH H- HHt P18XZ%IEH H HH:Hc<1 - 1IEH H- HH Hc<1 1IEH HIEH IEH H HHHc<1 1TIEHH HHc<1 H@ 0>IEH HpIEH cIEH HgIEH ZIEHH HCHc<1 6H@ 0IEHH HtHc<1 EIEHH HtHc<1 uH@ 0q~ff. AWAVAUATUSH H $ H H $ H8H dH%( H$( Hf H8 Hc@L4H H HD$ HD$ K| H{ H 1IL=*H
f H} LHIH8 8 M IHt 8 He PH ~ Hu HHr Hc 1c t.HIE1 H* = PH=; 1&AZA[1H$( dH+%( H8 []A\A]A^A_ LHT$H萫IHD$H He A<$ PH H` 8 HI HH, Hc 1 IVHD$ H$HtILHHþHIFLK8DC@HK(HSPHLHD$ Pt$de H uvHcd PH H HH Hc 1 @ HHSDKxLLD$Id Hc PH H T HM HHa Hc 1R H觯
D HHIE1H' P @ H7 x IE1 H!c H=E9 PHx' @ P1販XZMHb PH x*H HHt"Hc 1xf D H x H} ҧfH|$ II@H8 H<$HtI1HHD$zL\$HICLK8DC@L\$HK(LHHSPHD$ Pt$c L\$(H Hb DPH E HD HH Ic
QHAuHIE1H& t$ DP2 1H=7 >H 1 f D HcPH L $L Ht$H} ?L $H8 IISC ( Ho H0H LcB4@ @~p觥HIE1H5` VPH' v AuHP1H=6 nH` H H Pf Hȅ H\ H H Hc 1 HP IE18 H' ~ PH=_6 1ݦH @ H5` IE1 VPH% E Pt H x H xX H x HEH HHEH HIE1 H$ $ H=5 P1
A^X D HEH HwHEHH HtHc 1vH HEH HHEf D HEH H HH!Hc<1 1f. HuHEH Hu HEH xft$Z IE1H$ H=4 P1 ^_5 D 0 HL H0H Hc4>@ @迢IE1 H5] VPH$ o AuHt$PH# ATIE1P N 1H=3 gAXAYf D HEH Hv HHIcʀ<
Hu HuH Hu
HEH D xH x7 HuH H HHhost - weird...? AH01691: auth_ldap authenticate: using URL %s auth_ldap authenticate: final authn filter is %s AH01694: auth_ldap authenticate: user %s authentication failed; URI %s [%s][%s] (not authoritative) AH01695: auth_ldap authenticate: user %s authentication failed; URI %s [%s][%s] AH01696: auth_ldap authenticate: REMOTE_USER was to be set with attribute '%s', but this attribute was not requested for in the LDAP query for the user. REMOTE_USER will fall back to username or DN as appropriate. AH01697: auth_ldap authenticate: accepting %s AH01698: auth_ldap authorize: no sec->host - weird...? AH01699: ldap authorize: Userid is blank, AuthType=%s AH01700: ldap authorize: Creating LDAP req structure AH01701: auth_ldap authorise: User DN not found, %s AH01702: auth_ldap authorize: require user: user's DN has not been defined; failing authorization AH02585: auth_ldap authorize: require user: Can't evaluate expression: %s AH01703: auth_ldap authorize: require user: authorization successful AH01704: auth_ldap authorize: require user: authorization failed [%s][%s] AH01705: auth_ldap authorize: require user: authorization successful AH01706: auth_ldap authorize: require user: authorization failed [%s][%s] AH01707: auth_ldap authorize user: authorization denied for user %s to %s AH01708: auth_ldap authorize: no sec->host - weird...? AH01709: ldap authorize: Userid is blank, AuthType=%s AH01710: ldap authorize: Creating LDAP req structure AH01711: auth_ldap authorise: User DN not found, %s AH01712: auth_ldap authorize: require group: user's DN has not been defined; failing authorization for user %s AH02586: auth_ldap authorize: require group: Can't evaluate expression: %s AH01713: auth_ldap authorize: require group: testing for group membership in "%s" AH01714: auth_ldap authorize: require group: testing for %s: %s (%s) AH01715: auth_ldap authorize: require group: authorization successful (attribute %s) [%s][%d - %s] AH01719: auth_ldap authorize: require group "%s": didn't match with attr %s [%s][%d - %s] AH01716: auth_ldap authorise: require group "%s": failed [%s][%d - %s], checking sub-groups AH01717: auth_ldap authorise: require group (sub-group): authorisation successful (attribute %s) [%s][%d - %s] AH01718: auth_ldap authorise: require group (sub-group) "%s": didn't match with attr %s [%s][%d - %s] AH01720: auth_ldap authorize group: authorization denied for user %s to %s AH01721: auth_ldap authorize: no sec->host - weird...? AH01722: ldap authorize: Userid is blank, AuthType=%s AH01723: ldap authorize: Creating LDAP req structure AH01724: auth_ldap authorise: User DN not found with filter %s: %s AH02587: auth_ldap authorize: require dn: Can't evaluate expression: %s AH01725: auth_ldap authorize: require dn: user's DN has not been defined; failing authorization AH01726: auth_ldap authorize: require dn: authorization successful AH01727: auth_ldap authorize: require dn "%s": LDAP error [%s][%s] AH01728: auth_ldap authorize dn: authorization denied for user %s to %s AH01729: auth_ldap authorize: no sec->host - weird...? AH01730: ldap authorize: Userid is blank, AuthType=%s AH01731: ldap authorize: Creating LDAP req structure AH01732: auth_ldap authorise: User DN not found with filter %s: %s AH01733: auth_ldap authorize: require ldap-attribute: user's DN has not been defined; failing authorization AH02588: auth_ldap authorize: require ldap-attribute: Can't evaluate expression: %s AH01734: auth_ldap authorize: checking attribute %s has value %s AH01735: auth_ldap authorize: require attribute: authorization successful AH01736: auth_ldap authorize: require attribute: authorization failed [%s][%s] AH01737: auth_ldap authorize attribute: authorization denied for user %s to %s AH01738: auth_ldap authorize: no sec->host - weird...? AH01739: ldap authorize: Userid is blank, AuthType=%s AH01740: ldap authorize: Creating LDAP req structure AH01741: auth_ldap authorise: User DN not found with filter %s: %s AH01742: auth_ldap authorize: require ldap-filter: user's DN has not been defined; failing authorization AH02589: auth_ldap authorize: require ldap-filter: Can't evaluate require expression: %s AH01743: auth_ldap authorize: checking filter %s AH01744: auth_ldap authorize: checking dn match %s AH01745: auth_ldap authorize: require ldap-filter: authorization successful AH01746: auth_ldap authorize: require ldap-filter: %s authorization failed [%s][%s] AH01747: auth_ldap authorize: require ldap-filter: authorization failed [%s][%s] AH01748: auth_ldap authorize filter: authorization denied for user %s to %s URL to define LDAP connection. This should be an RFC 2255 compliant
URL of the form ldap://host[:port]/basedn[?attrib[?scope[?filter]]].
- Host is the name of the LDAP server. Use a space separated list of hosts
to specify redundant servers.
- Port is optional, and specifies the port to connect to.
- basedn specifies the base DN to start searches from
- Attrib specifies what attribute to search for in the directory. If not provided, it defaults to uid.
- Scope is the scope of the search, and can be either sub or one. If not provided, the default is sub.
- Filter is a filter to use in the search. If not provided, defaults to (objectClass=*).
Searches are performed using the attribute and the filter combined. For example, assume that the
LDAP URL is ldap://ldap.airius.com/ou=People, o=Airius?uid?sub?(posixid=*). Searches will
be done using the filter (&((posixid=*))(uid=username)), where username
is the user name passed by the HTTP client. The search will be a subtree search on the branch ou=People, o=Airius. DN to use to bind to LDAP server. If not provided, will do an anonymous bind. Password to use to bind to LDAP server. If not provided, will do an anonymous bind. Set to 'on' to return failures when user-specific bind fails - defaults to on. Set to 'on' to set the REMOTE_USER environment variable to be the full DN of the remote user. By default, this is set to off, meaning that the REMOTE_USER variable will contain whatever value the remote user sent. Override the user supplied username and place the contents of this attribute in the REMOTE_USER environment variable. Set to 'on' to force auth_ldap to do DN compares (for the "require dn" directive) using the server, and set it 'off' to do the compares locally (at the expense of possible false matches). See the documentation for a complete description of this option. Attribute labels used to define sub-group (or nested group) membership in groups - defaults to member and uniqueMember LDAP objectClass values used to identify sub-group instances - defaults to groupOfNames and groupOfUniqueNames Maximum subgroup nesting depth to be evaluated - defaults to 10 (top-level group = 0) A list of attribute labels used to identify the user members of groups - defaults to member and uniquemember If set to 'on', auth_ldap uses the DN that is retrieved from the server for subsequent group comparisons. If set to 'off', auth_ldap uses the string provided by the client directly. Defaults to 'on'. Determines how aliases are handled during a search. Can be one of the values "never", "searching", "finding", or "always". Defaults to always. Character set conversion configuration file. If omitted, character set conversion is disabled. The prefix to add to environment variables set during successful authorization, default 'AUTHORIZE_' Set to 'on' to perform the initial DN lookup with the basic auth credentials instead of anonymous or hard-coded credentials The regex and substitution to determine a username that can bind based on an HTTP basic auth username Set to 'on' to perform authorization-based searches with the users credentials, when this module has also performed authentication. Does not affect nested groups lookup. Set to 'on' to perform authorization-based compares with the users credentials, when this module has also performed authentication. Does not affect nested groups lookups. ISO-8859-1 accept-language AUTHORIZE_ AUTHENTICATE_ never off searching finding always on localhost uid objectclass=* not using SSL subtree base onelevel unknown (null) NONE STARTTLS ldaps mod_authnz_ldap.c ' exec: util_ldap.c utf-8 uldap_connection_close uldap_connection_find uldap_cache_comparedn uldap_cache_compare uldap_cache_checkuserid uldap_cache_getuserdn uldap_ssl_supported uldap_cache_check_subgroups 0 ldap authn ldap-user authz ldap-group ldap-dn ldap-attribute ldap-filter none (&(%s)(%s= *()\ AH02558: no AuthLDAPURL LDAP_BINDASUSER member uniqueMember groupOfNames groupOfUniqueNames AuthLDAPBindDN AuthLDAPBindPassword AuthLDAPBindAuthoritative AuthLDAPRemoteUserIsDN AuthLDAPRemoteUserAttribute AuthLDAPCompareDNOnServer AuthLDAPSubGroupAttribute AuthLDAPSubGroupClass AuthLDAPMaxSubGroupDepth AuthLDAPGroupAttribute AuthLDAPGroupAttributeIsDN AuthLDAPDereferenceAliases AuthLDAPCharsetConfig AuthLDAPAuthorizePrefix AuthLDAPInitialBindAsUser AuthLDAPInitialBindPattern AuthLDAPSearchAsUser AuthLDAPCompareAsUser ; f j8 jP @nh `n o @o o `p q@ rl @t u `u< ut @v z z4 0{ `| ~D `\ @ p8 Ы
zR x $ ep FJ w ?:*3$" D h \ h` t l HL l D]K JJ dm! m\ Hx
H S @ m BDD g
DBI X
CBC D
KBO ( #¸ÀUe^KE˟ a77d98db96b050b3ba31db72aa61c75cd1d02c.debug C .shstrtab .note.gnu.property .note.gnu.build-id .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt.got .plt.sec .text .fini .rodata .eh_frame_hdr .eh_frame .init_array .fini_array .data.rel.ro .dynamic .data .bss .gnu_debugaltlink .gnu_debuglink $ 1 o $ ; C V K o V
V
~ X o
` g 8 8 q B { v p # # # # ` ' ' _
) x x T p p x x P K
4 0