[Bug 154149] Re: Need package: mod_authnz_external
Hi, I have been trying to get mod_authnz_external working with pwauth on gutsy, with no luck so far. How would I go about building this same package for gutsy? Thanks, Ryan -- Need package: mod_authnz_external https://bugs.launchpad.net/bugs/154149 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 154149] Re: Need package: mod_authnz_external
** Changed in: apache2 (Ubuntu) Status: In Progress = Fix Released -- Need package: mod_authnz_external https://bugs.launchpad.net/bugs/154149 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 154149] Re: Need package: mod_authnz_external
I'm very happy now! About the package... I have some comments: - I think file /etc/apache2/mods-available/mod_authnz_external.load should be renamed to authnz_external.load, because all others authentication module loader files I have installed doesn't have a mod_ prefix in their names. # /bin/ls /etc/apache2/mods-available/*auth*.load auth_basic.load authn_anon.load authn_default.load auth_pam.load authz_groupfile.load authz_user.load auth_digest.load authn_dbd.load authn_file.load authz_dbm.load authz_host.load mod_authnz_external.load authn_alias.load authn_dbm.load authnz_ldap.loadauthz_default.load authz_owner.load -- File INSTALL from source packages is missing from /usr/share/doc/libapache2-mod-authnz-external folder. It should be there, because it has instructions for configuration. -- Finally... Binary is working great! :) -- Need package: mod_authnz_external https://bugs.launchpad.net/bugs/154149 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 154149] Re: Need package: mod_authnz_external
Hi, This is already in universe. Can you please give it a spin. Thanks chuck ** Changed in: apache2 (Ubuntu) Status: Triaged = In Progress -- Need package: mod_authnz_external https://bugs.launchpad.net/bugs/154149 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 154149] Re: Need package: mod_authnz_external
I have corrected the problems that Nicolas point out. Reuploaded to REVU. -- Need package: mod_authnz_external https://bugs.launchpad.net/bugs/154149 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 154149] Re: Need package: mod_authnz_external
On Wednesday 23 January 2008 14:52, David Sedeño Fernandez wrote: I have corrected the problems that Nicolas point out. Reuploaded to REVU. No need to status the REVU process in the LP bug. It just confuses things by having comments/status in two places. -- Need package: mod_authnz_external https://bugs.launchpad.net/bugs/154149 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 154149] Re: Need package: mod_authnz_external
I have packaged it for hardy. It's my first package so please test it and say me any problem that the package, surely, have. http://revu.tauware.de/details.py?package=libapache2-mod-authnz-external -- Need package: mod_authnz_external https://bugs.launchpad.net/bugs/154149 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 154149] Re: Need package: mod_authnz_external
You need to take a look at: * debian/changelog: + It says: (LP #154149) + It should say: (LP: #154149) * debian/control: + There is only one description, you need to write a more extensive long description and a smaller shot one * debian/copyright + There is no license on it, you should put the license of the package here I haven't take a deep look on the debian/rules files, but you have a lot of work :D -- Need package: mod_authnz_external https://bugs.launchpad.net/bugs/154149 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 154149] Re: Need package: mod_authnz_external
I'd like to request the inclusion of mod_auth_external and pwauth as well. I am not interested in letting apache read /etc/shadow directly, as this defeats the purpose of /etc/shadow. -- Need package: mod_authnz_external https://bugs.launchpad.net/bugs/154149 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 154149] Re: Need package: mod_authnz_external
I'm also interessted in this, cause I want single sign on for ssh,svn and trac. trac uses mod_authnz_external too. -- Need package: mod_authnz_external https://bugs.launchpad.net/bugs/154149 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 154149] Re: Need package: mod_authnz_external
Looks like a good choice considering that mod_auth_pam is dead upstream. ** Changed in: apache2 (Ubuntu) Importance: Undecided = Wishlist Status: New = Triaged -- Need package: mod_authnz_external https://bugs.launchpad.net/bugs/154149 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 154149] Re: Need package: mod_authnz_external
Would like it also! -- Need package: mod_authnz_external https://bugs.launchpad.net/bugs/154149 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 154149] Re: Need package: mod_authnz_external
I'm +1 on this, it makes integrating authentication credentials really really easy. It also has some added benefits from a security perspective, as you can run your external authentication checks as a setuid root application while running apache (and the module) as an underprivileged user. Finally mod_auth_pam[1] development has stalled, and mod_authnz_external seems to be reasonably maintained. [1] - http://pam.sourceforge.net/mod_auth_pam/ -- Need package: mod_authnz_external https://bugs.launchpad.net/bugs/154149 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 154149] Re: Need package: mod_authnz_external
Another wish... Can you include mod_authz_unixgroup also? http://www.unixpapa.com/mod_authz_unixgroup/ -- Need package: mod_authnz_external https://bugs.launchpad.net/bugs/154149 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 154149] Re: Need package: mod_authnz_external
Ok, I had a second try and got it to work. But mod_auth_pam module needs read-only access to /etc/shadow and I don't want to allow that permission. If I do, a malicious user could write a PHP script that catches all my password database, because I need to enable mod_php5 and mod_userdir modules in my server. mod_auth_external doesn't need access to /etc/passwd, because a SGID- SHADOW external agent do that access (oops - I forgot to ask for it: http://www.unixpapa.com/pwauth/ ). By using in that way, the malicious user must do a dictionary attack on that external agent in order to get some passwords. This dictionary attack method will take more time than a dictionary attack on a shadow entry, because PAM freezes for some seconds after an authentication failure. Could you give me another idea? ** Attachment added: My .htaccess file http://launchpadlibrarian.net/10111273/.htaccess -- Need package: mod_authnz_external https://bugs.launchpad.net/bugs/154149 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
