Apache upgrade 2.2 -> 2.4 and "PerlAuthenHandler Authen::Simple::IMAP"
I posted this first on the Apache mailing list, one person mentioned as this is mod_perl related I should post it here, so here it is. I have just started upgrading all of my CentOS servers from 6.X to 7.X, with that Apache gets upgraded from 2.2 to 2.4, but it seems mod_perl has not increased the version number. While I have fixed most of the issues realted to the upgrade of Apache one I cannot solve is the "PerlAuthenHandler Authen::Simple::IMAP" in .htaccess files. I use this rather frequently on many machines as it is real easy for me to look after this. Using apache 2.2 this used to work like a charm with an .htaccess file in the directory to protect: satisfy any Order deny,allow deny from all AuthName "Protected by IMAP credentials" AuthType Basic require user USER1 USER2 PerlAuthenHandler Authen::Simple::IMAP PerlSetVarAuthenSimpleIMAP_host "CENTRAL.IMAPS.SERVER.HOST.NAME" PerlSetVarAuthenSimpleIMAP_protocol "IMAPS" allow from localhost allow from THESERVER I re-wrote this for apache 2.4 (not repeating the perl stuff which is the same in both) but same .htaccess file Require user USER1 USER2 # do not turn this off, or else this will not work. Require ip 127.0.0.1 Require host localhost Require host THESERVER In the server's httpd.conf file I have: PerlRequire /etc/httpd/conf/startup.pl which contains this: #!/bin/env /usr/bin/perl use strict; use warnings; use Authen::Simple::IMAP; 1; This loads with no error messages (this also means mod_perl is working). The problem really is: ==> error_log <== failed to resolve handler Authen::Simple::IMAP failed to resolve handler Authen::Simple::IMAP failed to resolve handler Authen::Simple::IMAP failed to resolve handler Authen::Simple::IMAP The browser page displays a "Secure connection failed" which is crap as the certificate and everything is in perfect condition. How can I make this work with apache 2.4? What am I doing wrong? thanks Jobst -- If a pig loses its voice, is it disgruntled? | |0| | Jobst Schmalenbach, General Manager | | |0| Barrett & Sales Essentials |0|0|0| +61 3 9533 , POBox 277, Caulfield South, 3162, Australia
Re: Apache upgrade 2.2 -> 2.4 and "PerlAuthenHandler Authen::Simple::IMAP"
On 2/19/2019 5:33 PM, Jobst Schmalenbach wrote: While I have fixed most of the issues realted to the upgrade of Apache one I cannot solve is the "PerlAuthenHandler Authen::Simple::IMAP" in .htaccess files. The authentication/authorization API changed between 2.2/2.4, if this module has not been updated to accommodate that, there is no way to fix this issue other than updating the module to work with the new API. Where does this module come from? The only thing I can find is: https://metacpan.org/pod/Authen::Simple which does not appear to include an IMAP component.
Re: Apache upgrade 2.2 -> 2.4 and "PerlAuthenHandler Authen::Simple::IMAP"
* Paul B. Henson wrote: > Date: Tue, 19 Feb 2019 17:50:15 -0800 > From: "Paul B. Henson" > To: modperl@perl.apache.org > Subject: Re: Apache upgrade 2.2 -> 2.4 and "PerlAuthenHandler > Authen::Simple::IMAP" > User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:60.0) Gecko/20100101 > Thunderbird/60.5.1 > > On 2/19/2019 5:33 PM, Jobst Schmalenbach wrote: > > > >While I have fixed most of the issues realted to the upgrade of > >Apache one I cannot solve is the "PerlAuthenHandler > >Authen::Simple::IMAP" in .htaccess files. > The authentication/authorization API changed between 2.2/2.4, if this module > has not been updated to accommodate that, there is no way to fix this issue > other than updating the module to work with the new API. > > Where does this module come from? The only thing I can find is: > > https://metacpan.org/pod/Authen::Simple > > which does not appear to include an IMAP component. Found this on CPAN: Module < Authen::Simple::IMAP (DMARTIN/Authen-Simple-IMAP-0.1.2.tar.gz) -Jie
Re: Apache upgrade 2.2 -> 2.4 and "PerlAuthenHandler Authen::Simple::IMAP"
On 2/19/2019 6:02 PM, Jie Gao wrote: Found this on CPAN: Module < Authen::Simple::IMAP (DMARTIN/Authen-Simple-IMAP-0.1.2.tar.gz) Hmm, perhaps I should have searched CPAN directly rather than relying on Google :). Thanks for the pointer… The last update for this module was in 2009; Apache 2.4 was released in 2012, so without even looking at the code I am fairly confident the module does not support it. The documentation comment "I've never tried this in mod_perl, so including the mod_perl example in the synopsis is pure hubris on my part" is also perhaps illuminating :). Hmm, actually, it looks like the module in need of update is Authen::Simple::Apache, not Authen::Simple::IMAP itself. That one was last released in April 2012, but does not appear to include Apache 2.4 support. You could try contacting the author of that module to ask if he would be willing to update it? Or if you are handy at coding, you could try to update it yourself, or contract somebody do it for you. There are a few other authentication modules out there with 2.4 support that could serve as examples, including https://metacpan.org/pod/Apache2::AuthCASpbh :).
Re: Apache upgrade 2.2 -> 2.4 and "PerlAuthenHandler Authen::Simple::IMAP"
On Wed, Feb 20, 2019 at 02:02:54AM +, Jie Gao (j@sydney.edu.au) wrote: > * Paul B. Henson wrote: > > > > > https://metacpan.org/pod/Authen::Simple > > > > which does not appear to include an IMAP component. > > Found this on CPAN: > > Module < Authen::Simple::IMAP (DMARTIN/Authen-Simple-IMAP-0.1.2.tar.gz) That is correct. Jobst -- Dont blink or you miss it! | |0| | Jobst Schmalenbach, General Manager | | |0| Barrett & Sales Essentials |0|0|0| +61 3 9533 , POBox 277, Caulfield South, 3162, Australia
Re: Apache upgrade 2.2 -> 2.4 and "PerlAuthenHandler Authen::Simple::IMAP"
On Tue, Feb 19, 2019 at 06:14:53PM -0800, Paul B. Henson (hen...@acm.org) wrote: > On 2/19/2019 6:02 PM, Jie Gao wrote: > > Found this on CPAN: > > > > Module < Authen::Simple::IMAP (DMARTIN/Authen-Simple-IMAP-0.1.2.tar.gz) > > Hmm, perhaps I should have searched CPAN directly rather than relying on > > :). Is there nothing else that provide IMAP conneciton/login/query? Jobst -- You seem (in my (humble) opinion (which doesn.t mean much)) to be (or possibly could be) more of a Lisp programmer (but I could be (and probably am) wrong) | |0| | Jobst Schmalenbach, General Manager | | |0| Barrett & Sales Essentials |0|0|0| +61 3 9533 , POBox 277, Caulfield South, 3162, Australia
Re: Apache upgrade 2.2 -> 2.4 and "PerlAuthenHandler Authen::Simple::IMAP"
On Tue, Feb 19, 2019 at 06:14:53PM -0800, Paul B. Henson (hen...@acm.org) wrote: > On 2/19/2019 6:02 PM, Jie Gao wrote: > > Found this on CPAN: > > > > Module < Authen::Simple::IMAP (DMARTIN/Authen-Simple-IMAP-0.1.2.tar.gz) > > The last update for this module was in 2009; Apache 2.4 was released in > 2012, so without even looking at the code I am fairly confident the module > does not support it. > > Authen::Simple::Apache, not Authen::Simple::IMAP itself. That one was last > There are actually a few issues here and it's not - Authen::Simple::Apache - Authen::Simple::IMAP It has to do with the .htaccess file, I just got a login box. I saw this: https://www.gsp.com/cgi-bin/man.cgi?topic=Authen::Simple::Passwd which has a different setup than the .htaccess I specified PerlModule Authen::Simple::Apache PerlModule Authen::Simple::Passwd PerlSetVar AuthenSimplePasswd_path "/etc/passwd" PerlAuthenHandler Authen::Simple::Passwd AuthType Basic AuthName "Protected Area" Require valid-user They are ACTUALLY specifying the MODULES which I did not do. Need to play some hockey first .. BBL Jobst -- People without trees are like fish without clean water! | |0| | Jobst Schmalenbach, General Manager | | |0| Barrett & Sales Essentials |0|0|0| +61 3 9533 , POBox 277, Caulfield South, 3162, Australia
