[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-developers] mod_auth_pam
- Subject: [cobalt-developers] mod_auth_pam
 
- From: "Matthew Nuzum" <cobalt@xxxxxxxxxxxxx>
 
- Date: Thu Apr 18 15:20:32 2002
 
- Organization: Bearfruit.org
 
- List-id: Discussion Forum for developers on Sun Cobalt Networks products <cobalt-developers.list.cobalt.com>
 
OK, so far so good.  I have Apache, Frontpage 2002 extensions, Chilli
ASP, PHP all working harmoniously together.  My last little problem
(that I know of) is mod_auth_pam.
At first, when I fired up the server, I tried to log in to a protected
directory.  I believe that the auth worked, but the httpd process would
segfault so I didn't get too see much.  This doesn't surprise me too
much, since apache certainly changed a good amount.
Of course removing the .htaccess allows everything to work fine, so the
only variable is the auth stuff in the .htaccess.
I downloaded and compiled mod_auth_pam 1.0a from
http://pam.sourceforge.net/mod_auth_pam/ .  Now, I have no segfaults,
instead, my user name and password is rejected.  I get the following
message in /var/log/httpd/errors:
[Wed Apr 17 23:51:45 2002] [error] (13)Permission denied: access to
/stats failed for 65.34.53.29, reason: Authentication failure
The relevant portions of my .conf files are:
access.conf:
  AuthPAM_Enabled on
  AuthPAM_FallThrough on
httpd.conf:
  #LoadModule pam_external_auth_module
lib/apache/mod_auth_pam_external.so
  LoadModule pam_auth_module    lib/apache/mod_auth_pam.so
  AddModule mod_auth_pam.c
I tried the following two configs for PAM:
The example that came with mod_auth_pam:
# The PAM configuration file for the `httpd' service
#
auth       required   pam_pwdb.so shadow nullok
account    required   pam_pwdb.so
and the default:
auth       requisite    /lib/security/pam_nologin.so
auth       requisite    /lib/security/pam_shells.so
auth       required     /lib/security/pam_pwdb.so shadow nullok
account    required     /lib/security/pam_pwdb.so
My .htaccess file is the default (I think) for the stats directory:
#Access file
order allow,deny
allow from all
require group admin
Authname WebStats
Authtype Basic
AuthAuthoritative off
All I really want is to be able to get people into the stats folder.
Any suggestions or tips out there?  Anyone know what version ships with
the cobalt and if there's a src.rpm file?
Thanks,
Matthew Nuzum
www.bearfruit.org
cobalt@xxxxxxxxxxxxx