** Changed in: libapache2-mod-auth-pam (Debian)
Status: New = Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/130099
Title:
libapache2-mod-auth-pam: doesnt work with Apache 2.1
Im marking this as wont fix, based on comments from Marc.
Regards
chuck
** Changed in: libapache2-mod-auth-pam (Ubuntu)
Status: Confirmed = Won't Fix
--
libapache2-mod-auth-pam: doesnt work with Apache 2.1
https://bugs.launchpad.net/bugs/130099
You received this bug notification
libapache2-mod-authnz-external does not support pam-authentication out
of the box any more, you have to write your own plugin or fetch external
code.
--
libapache2-mod-auth-pam: doesnt work with Apache 2.1
https://bugs.launchpad.net/bugs/130099
You received this bug notification because you are
The pam authenticator is called pwauth, and there's a package for it in
karmic.
--
libapache2-mod-auth-pam: doesnt work with Apache 2.1
https://bugs.launchpad.net/bugs/130099
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
No, we are _not_ going to add www-data to the shadow group. Doing so has
major security implications.
libapache2-mod-auth-pam is no longer being maintained and should be
removed from karmic.
Use libapache2-mod-authnz-external instead.
--
libapache2-mod-auth-pam: doesnt work with Apache 2.1
Chuck Short wrote escreveu:
This workaround makes me nervous whats the implications of adding www-
data to the shadow group?
Too d*mn many. But how else would an Apache module authenticate against
PAM? It's all a bunch of libraries anyway.
I'd prefer something like saslauthd: a single piece
This workaround makes me nervous whats the implications of adding www-
data to the shadow group?
Regards
chuck
--
libapache2-mod-auth-pam: doesnt work with Apache 2.1
https://bugs.launchpad.net/bugs/130099
You received this bug notification because you are a member of Ubuntu
Bugs, which is
This is still a problem in Karmic package libapache2-mod-auth-pam
version 1.1.1-6.1ubuntu2
I have done a work-a-round in post-install, adding www-data to the
shadow-group. You have still to set AuthBasicAuthoritative Off.
A debdiff attached
** Attachment added:
Dunno about previous versions, but for Hardy you only need to add www-
data to group shadow for the snippet above to work.
I'm subscribed to this bug; if needed, I can post my config details.
--
libapache2-mod-auth-pam: doesnt work with Apache 2.1
https://bugs.launchpad.net/bugs/130099
You
** Changed in: libapache2-mod-auth-pam (Ubuntu)
Importance: Undecided = High
--
libapache2-mod-auth-pam: doesnt work with Apache 2.1
https://bugs.launchpad.net/bugs/130099
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.
--
In adition to adding AuthBasicAuthoritative Off, you have to do the
following:
- Add www-data to the shadow group (usermod -G shadow www-data)
- Symlink /etc/pam.d/apache2 to /etc/pam.d/httpd, as that's what Apache2 looks
for (ln -s /etc/pam.d/apache2 /etc/pam.d/httpd)
This is a workaround,
** Bug watch added: Debian Bug tracker #394097
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394097
** Also affects: libapache2-mod-auth-pam (Debian) via
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394097
Importance: Unknown
Status: Unknown
--
libapache2-mod-auth-pam:
This is a work-a-round which some times get this to work
Directory /var/www/
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
AuthType Basic
** Changed in: libapache2-mod-auth-pam (Debian)
Status: Unknown = New
--
libapache2-mod-auth-pam: doesnt work with Apache 2.1
https://bugs.launchpad.net/bugs/130099
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.
--
14 matches
Mail list logo
