Torsten Landschoff wrote:
> If you open up access to /etc/shadow you are doing something very wrong.
I forgot to mention that finally I've used a combination of:
libapache2-mod-authnz-external + pwauth
http://packages.debian.org/squeeze/libapache2-mod-authnz-external
http://packages.debian.org/squ
Hi Marcin,
On Fri, Oct 09, 2009 at 09:43:45PM +0200, Marcin Szewczyk wrote:
> Am I the only one, who thinks that giving anything a privilege to read
> /etc/shadow while using PAM is a complete misunderstanding of how PAM works?
No. I found this report while trying to reduce the duplication in pa
Am I the only one, who thinks that giving anything a privilege to read
/etc/shadow while using PAM is a complete misunderstanding of how PAM works?
--
Marcin Szewczyk http://wodny.org
mailto:marcin.szewc...@wodny.borg <- remove b / usuń b
xmpp:wo...@ubuntu.pl
Hi,
I needed to add the www-data user into the shadow group so it could read
/etc/shadow.
Once I did that the authentication worked :-)
Hope this helps.
Richard.
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas.
In case anyone is still hitting their heads against the wall on this, here's
a way to get "require valid-user" and "require group xxx" working:
Enable modules:
auth_basic
auth_pam
auth_sys_group:
Config:
AuthType Basic
AuthName "Private Access"
AuthPAM_Enabled On
AuthGROUP_Ena
I have also had problems after an upgrade to Etch. The recommended additions of
"AuthPAM_FallThrough off" and "AuthBasicAuthoritative off" however do not work
in my case. My setup makes use of LDAP and Kerberos and as far as I know the
PAM configuration is correct (for example: I can successfully S
I wrote:
> Thanks, enabling the authz_user module together with "AuthBasicAuthoritative
> off" works.
> I still think this is a workaround though (as I still get "No Authn provider
> configured" warnings)
> and not a proper solution -- which would be a libapache2-authn-pam package,
> IMHO.
No
Robin Farine <[EMAIL PROTECTED]> wrote:
> This did not work out of the box for me when I upgraded to apache2
> 2.2.3-3. After some trial and errors -- apache2 error messages did
> not ring any bell -- it occurred that for auth_pam with "Require
> valid-user" to work, the auth_basic and authz_us
Hallo, Robbert!
On Tue, 7 Nov 2006 13:00:14 +0100 (CET)
Robbert Kouprie <[EMAIL PROTECTED]> wrote:
> Please try adding "AuthBasicAuthoritative Off" to your configuration.
>
> My complete config is:
>
>
>AuthType Basic
>AuthName "Please login"
>AuthPAM_Enabled on
>AuthPAM_FallTh
On Tue November 7 2006 13:00, Robbert Kouprie wrote:
> My complete config is:
>
>
>AuthType Basic
>AuthName "Please login"
>AuthPAM_Enabled on
>AuthPAM_FallThrough off
>AuthBasicAuthoritative off
>require valid-user
>
This did not work out of the box for me when I upgrad
Zitat von Robbert Kouprie <[EMAIL PROTECTED]>:
Hi guys,
Please try adding "AuthBasicAuthoritative Off" to your configuration.
My complete config is:
AuthType Basic
AuthName "Please login"
AuthPAM_Enabled on
AuthPAM_FallThrough off
AuthBasicAuthoritative off
require valid-user
R
Hi guys,
Please try adding "AuthBasicAuthoritative Off" to your configuration.
My complete config is:
AuthType Basic
AuthName "Please login"
AuthPAM_Enabled on
AuthPAM_FallThrough off
AuthBasicAuthoritative off
require valid-user
Regards,
Robbert
--
To UNSUBSCRIBE, email to [EM
Package: libapache2-mod-auth-pam
Version: 1.1.1-6.1
Followup-For: Bug #394097
If you still have mod-auth-pam working, could you please provide
some information on how to configure it?
On Apache 2.0.x I had working:
AuthPAM_Enabled on
AuthType Basic
AuthName "DSPAM Control Center"
Require valid-
> Since the auth mechanisms were changed in Apache 2.1 this module does
> not work any more. It probably should be replaced by mod_authn_pam
> available at http://mod-auth.sourceforge.net/docs/mod_authn_pam/
It works for me. Can you be more specific?
I am going to lower this to 'important' as I
Package: libapache2-mod-auth-pam
Version: 1.1.1-6.1
Severity: grave
Justification: renders package unusable
Since the auth mechanisms were changed in Apache 2.1 this module does
not work any more. It probably should be replaced by mod_authn_pam
available at http://mod-auth.sourceforge.net/docs/mod
15 matches
Mail list logo
