Getting pam_auth_mod to work with apache2.0
Trond Husø
tr-huso at online.no
Thu Sep 2 08:43:15 UTC 2004
Hi group,
I'm a new user to this list and I signed up to get pam_auth_mod to work successfully with apache 2.0 when using .htaccess files and no .htpasswd file.
I'm currently trying to get this to work on a fedora system with apache 2.0.50 installed. If someone can tell me how the httpd pam-file and the .htaccess file should look like, I'd be very gratefull.
At the moment I'm getting errors like:
in /var/log/httpd/error_log:
[crit] [client 192.168.1.2] configuration error: couldn't check user. No user file?: /testdir/
[error] [client 192.168.1.2] PAM: user 'xxxxx' - not authenticated: Authentication failure
in /var/log/messages
httpd(pam_unix)[3626]: authentication failure; logname= uid=48 euid=48 tty= ruser= rhost= user=xxxxx
(xxxxx = username)
the output of cat /etc/pam.d/httpd is:
#%PAM-1.0
auth required /lib/security/pam_stack.so service=system-auth
account required /lib/security/pam_stack.so service=system-auth
the .htaccess-file looks like this:
#ALL users on the RAQ550 can access this directory.
#Access file
order allow,deny
allow from all
require valid-user
Authname "Login Name for Access"
Authtype Basic
AuthAuthoritative off
AuthPAM_Enabled off
(This one results in the error No user file?: /testdir/)
I'm also trying to get it to work on a fedora fc1 system with apache 2.0.50 installed - and with a BlueQuartz webadmin-system. BlueQuartz is a translation of the Cobalt RAQ550 system for RedHat and Fedora.
I pretty much get the same errors there.
As far as I understand the BQ-system doesn't use the shadow-password file. I also read somewhere that the RAQ550 was set up so that it wouldn't be possible to use the raq-db with .htaccess because of security reasons.
During my research I found that Cobalt had a file called mod_auth_pam-external so it could work with external databases. Does anyone on the list know if there is such a module for apache 2.0?
Hope someone can help out.
Yours,
Trond
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pam-list/attachments/20040902/119bdf37/attachment.htm>
More information about the Pam-list
mailing list