[Bug 130099] Re: libapache2-mod-auth-pam: doesnt work with Apache 2.1
** Changed in: libapache2-mod-auth-pam (Debian) Status: New = Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/130099 Title: libapache2-mod-auth-pam: doesnt work with Apache 2.1 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libapache2-mod-auth-pam/+bug/130099/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 130099] Re: libapache2-mod-auth-pam: doesnt work with Apache 2.1
Im marking this as wont fix, based on comments from Marc. Regards chuck ** Changed in: libapache2-mod-auth-pam (Ubuntu) Status: Confirmed = Won't Fix -- libapache2-mod-auth-pam: doesnt work with Apache 2.1 https://bugs.launchpad.net/bugs/130099 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 130099] Re: libapache2-mod-auth-pam: doesnt work with Apache 2.1
libapache2-mod-authnz-external does not support pam-authentication out of the box any more, you have to write your own plugin or fetch external code. -- libapache2-mod-auth-pam: doesnt work with Apache 2.1 https://bugs.launchpad.net/bugs/130099 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 130099] Re: libapache2-mod-auth-pam: doesnt work with Apache 2.1
The pam authenticator is called pwauth, and there's a package for it in karmic. -- libapache2-mod-auth-pam: doesnt work with Apache 2.1 https://bugs.launchpad.net/bugs/130099 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 130099] Re: libapache2-mod-auth-pam: doesnt work with Apache 2.1
No, we are _not_ going to add www-data to the shadow group. Doing so has major security implications. libapache2-mod-auth-pam is no longer being maintained and should be removed from karmic. Use libapache2-mod-authnz-external instead. -- libapache2-mod-auth-pam: doesnt work with Apache 2.1 https://bugs.launchpad.net/bugs/130099 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 130099] Re: libapache2-mod-auth-pam: doesnt work with Apache 2.1
Chuck Short wrote escreveu: This workaround makes me nervous whats the implications of adding www- data to the shadow group? Too d*mn many. But how else would an Apache module authenticate against PAM? It's all a bunch of libraries anyway. I'd prefer something like saslauthd: a single piece of code that has shadow access. Then you'd open a socket to that daemon and authenticate from there. -- libapache2-mod-auth-pam: doesnt work with Apache 2.1 https://bugs.launchpad.net/bugs/130099 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 130099] Re: libapache2-mod-auth-pam: doesnt work with Apache 2.1
This workaround makes me nervous whats the implications of adding www- data to the shadow group? Regards chuck -- libapache2-mod-auth-pam: doesnt work with Apache 2.1 https://bugs.launchpad.net/bugs/130099 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 130099] Re: libapache2-mod-auth-pam: doesnt work with Apache 2.1
This is still a problem in Karmic package libapache2-mod-auth-pam version 1.1.1-6.1ubuntu2 I have done a work-a-round in post-install, adding www-data to the shadow-group. You have still to set AuthBasicAuthoritative Off. A debdiff attached ** Attachment added: libapache2-mod-auth-pam_1.1.1-6.1ubuntu3.debdiff http://launchpadlibrarian.net/32935333/libapache2-mod-auth-pam_1.1.1-6.1ubuntu3.debdiff -- libapache2-mod-auth-pam: doesnt work with Apache 2.1 https://bugs.launchpad.net/bugs/130099 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 130099] Re: libapache2-mod-auth-pam: doesnt work with Apache 2.1
Dunno about previous versions, but for Hardy you only need to add www- data to group shadow for the snippet above to work. I'm subscribed to this bug; if needed, I can post my config details. -- libapache2-mod-auth-pam: doesnt work with Apache 2.1 https://bugs.launchpad.net/bugs/130099 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 130099] Re: libapache2-mod-auth-pam: doesnt work with Apache 2.1
** Changed in: libapache2-mod-auth-pam (Ubuntu) Importance: Undecided = High -- libapache2-mod-auth-pam: doesnt work with Apache 2.1 https://bugs.launchpad.net/bugs/130099 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 130099] Re: libapache2-mod-auth-pam: doesnt work with Apache 2.1
In adition to adding AuthBasicAuthoritative Off, you have to do the following: - Add www-data to the shadow group (usermod -G shadow www-data) - Symlink /etc/pam.d/apache2 to /etc/pam.d/httpd, as that's what Apache2 looks for (ln -s /etc/pam.d/apache2 /etc/pam.d/httpd) This is a workaround, obviously this should be fixed :D ** Changed in: libapache2-mod-auth-pam (Ubuntu) Status: New = Confirmed -- libapache2-mod-auth-pam: doesnt work with Apache 2.1 https://bugs.launchpad.net/bugs/130099 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 130099] Re: libapache2-mod-auth-pam: doesnt work with Apache 2.1
** Bug watch added: Debian Bug tracker #394097 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394097 ** Also affects: libapache2-mod-auth-pam (Debian) via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394097 Importance: Unknown Status: Unknown -- libapache2-mod-auth-pam: doesnt work with Apache 2.1 https://bugs.launchpad.net/bugs/130099 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 130099] Re: libapache2-mod-auth-pam: doesnt work with Apache 2.1
This is a work-a-round which some times get this to work Directory /var/www/ Options Indexes FollowSymLinks MultiViews AllowOverride None Order allow,deny allow from all AuthType Basic AuthPAM_Enabled on AuthBasicAuthoritative Off AuthName Barney-servern Require valid-user /Directory -- libapache2-mod-auth-pam: doesnt work with Apache 2.1 https://bugs.launchpad.net/bugs/130099 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 130099] Re: libapache2-mod-auth-pam: doesnt work with Apache 2.1
** Changed in: libapache2-mod-auth-pam (Debian) Status: Unknown = New -- libapache2-mod-auth-pam: doesnt work with Apache 2.1 https://bugs.launchpad.net/bugs/130099 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
