Bug#311776: apache-ssl: Basic Authentication does not work

2005-06-03 Thread Jens Stavnstrup
Package: apache-ssl
Version: 1.3.33-6
Severity: grave
Justification: renders package unusable


Basic authentication does not work. Users are not recognized, and in the
logfile it states user  not found -- notice the extra space between user
and not, indicating that apache-ssl seem to think the user is identified by
an empty string.

This bug seem not related related to to bug #266218 or #288424, but is
considered critical considering this version is going to be the default package 
in
Sarge 



-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.4.18-bf2.4
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages apache-ssl depends on:
ii  apache-common   1.3.33-6 support files for all Apache webse
ii  debconf 1.4.30.13Debian configuration management sy
ii  dpkg1.10.27  Package maintenance system for Deb
ii  libc6   2.3.2.ds1-22 GNU C Library: Shared libraries an
ii  libdb4.24.2.52-18Berkeley v4.2 Database Libraries [
ii  libexpat1   1.95.8-3 XML parsing C library - runtime li
ii  libmagic1   4.12-1   File type determination library us
ii  libssl0.9.7 0.9.7e-3 SSL shared libraries
ii  logrotate   3.7-5Log rotation utility
ii  mime-support3.28-1   MIME files 'mime.types'  'mailcap
ii  openssl 0.9.7e-3 Secure Socket Layer (SSL) binary a
ii  perl5.8.4-8  Larry Wall's Practical Extraction 
ii  ssl-cert1.0-11   Simple debconf wrapper for openssl

-- debconf information:
  apache-ssl/server-admin: [EMAIL PROTECTED]
* apache-ssl/enable-suexec: false
  apache-ssl/init: true
  apache-ssl/server-name: novo.ddre.dk
  apache-ssl/document-root: /home/webs/novo/htdocs


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#311776: apache-ssl: Basic Authentication does not work

2005-06-03 Thread Thom May
Severity 311776 normal
kthxbye

Hi,
it's likely that you have an erroneous config, rather than this being a bug
in apache. If basic auth was broken, I assure you that we'd have noticed by
now.
The problem you're reporting is often a symptom of having multiple auth
providers loaded; have a look at /etc/apache-ssl/modules.conf or attach it
here and check you don't have mod_auth_sys or mod_auth_system installed.
Cheers,
-Thom


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#311776: apache-ssl: Basic Authentication does not work

2005-06-03 Thread Jens Stavnstrup
On Fri, 3 Jun 2005, Thom May wrote:

 Severity 311776 normal
 kthxbye

 Hi,
 it's likely that you have an erroneous config, rather than this being a bug
 in apache. If basic auth was broken, I assure you that we'd have noticed by
 now.

Well from my experience with Debian. I tend to agree,

 The problem you're reporting is often a symptom of having multiple auth
 providers loaded; have a look at /etc/apache-ssl/modules.conf or attach it
 here and check you don't have mod_auth_sys or mod_auth_system installed.
 Cheers,
 -Thom


I have upgraded a stable Woody to Sarge keeping my original config
file (that might be my problem). In that config file only mod_auth_ssl is
enabled - modules.conf is never loaded.

I will port my 1.3.26 configuration to the new 1.3.36-6 config file and
see what happens.

Regard

Jens



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]