[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-developers] mod_auth_pam
- Subject: [cobalt-developers] mod_auth_pam
- From: "Matthew Nuzum" <cobalt@xxxxxxxxxxxxx>
- Date: Thu Apr 18 15:20:32 2002
- Organization: Bearfruit.org
- List-id: Discussion Forum for developers on Sun Cobalt Networks products <cobalt-developers.list.cobalt.com>
OK, so far so good. I have Apache, Frontpage 2002 extensions, Chilli
ASP, PHP all working harmoniously together. My last little problem
(that I know of) is mod_auth_pam.
At first, when I fired up the server, I tried to log in to a protected
directory. I believe that the auth worked, but the httpd process would
segfault so I didn't get too see much. This doesn't surprise me too
much, since apache certainly changed a good amount.
Of course removing the .htaccess allows everything to work fine, so the
only variable is the auth stuff in the .htaccess.
I downloaded and compiled mod_auth_pam 1.0a from
http://pam.sourceforge.net/mod_auth_pam/ . Now, I have no segfaults,
instead, my user name and password is rejected. I get the following
message in /var/log/httpd/errors:
[Wed Apr 17 23:51:45 2002] [error] (13)Permission denied: access to
/stats failed for 65.34.53.29, reason: Authentication failure
The relevant portions of my .conf files are:
access.conf:
AuthPAM_Enabled on
AuthPAM_FallThrough on
httpd.conf:
#LoadModule pam_external_auth_module
lib/apache/mod_auth_pam_external.so
LoadModule pam_auth_module lib/apache/mod_auth_pam.so
AddModule mod_auth_pam.c
I tried the following two configs for PAM:
The example that came with mod_auth_pam:
# The PAM configuration file for the `httpd' service
#
auth required pam_pwdb.so shadow nullok
account required pam_pwdb.so
and the default:
auth requisite /lib/security/pam_nologin.so
auth requisite /lib/security/pam_shells.so
auth required /lib/security/pam_pwdb.so shadow nullok
account required /lib/security/pam_pwdb.so
My .htaccess file is the default (I think) for the stats directory:
#Access file
order allow,deny
allow from all
require group admin
Authname WebStats
Authtype Basic
AuthAuthoritative off
All I really want is to be able to get people into the stats folder.
Any suggestions or tips out there? Anyone know what version ships with
the cobalt and if there's a src.rpm file?
Thanks,
Matthew Nuzum
www.bearfruit.org
cobalt@xxxxxxxxxxxxx