>Number:         2420
>Category:       os-linux
>Synopsis:       mod_auth_dbm  returns server error if user is not in the 
>database
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    apache
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Thu Jun 11 13:10:00 PDT 1998
>Last-Modified:
>Originator:     [EMAIL PROTECTED]
>Organization:
apache
>Release:        1.3
>Environment:
Linux www 2.0.30 #7 Fri Feb 27 14:46:02 MST 1998 i586 
>Description:

mod_auth_dbm:
returns a server error if the login key does not exist in the database.
errorlog output:
[Thu Jun 11 13:42:28 1998] [crit] configuration error:  couldn't check user.  
No  user file?:

if the user key and the password are correct the sever acts properly.
if the user key exists in the database and the password is wrong the server 
acts properly.

mod_auth_dbm,mod_expires are the only DSO modules.



>How-To-Repeat:
it's on an intranet. sorry
>Fix:
i'm going back to 1.2.5
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include <[EMAIL PROTECTED]> in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]



Reply via email to