Re: Apache Authentication with System Accounts?

2016-12-24 Thread Aero Maxx D
> On 24 Dec 2016, at 11:27, Daniel J Walsh wrote: > > If you put SELinux in permissive mode does it work? If not, then it > most likely NOT an > SELinux issue. > ___ > users mailing list -- users@lists.fedoraproject.org > To unsubscribe send an email

Re: Apache Authentication with System Accounts?

2016-12-24 Thread Aero Maxx D
> On 23 Dec 2016, at 23:05, Joe Zeff wrote: > > This is probably more apache related than Fedora; have you tried one of their > support lists or forums? I haven't tried that no, mainly due to the mod_authnz_pam being made by from what I can tell a third party. The documentation is very limit

Re: Apache Authentication with System Accounts?

2016-12-23 Thread Aero Maxx D
> On 23 Dec 2016, at 21:19, Matthew Miller wrote: > > Oh, just to check -- any SELinux AVC logged? From the mod_authnz_pam > page, you need to do `sudo setsebool -P allow_httpd_mod_auth_pam 1`. > > Other than that, anything at all else logged? Yeah I've done that still the same as before. mod

Re: Apache Authentication with System Accounts?

2016-12-23 Thread Aero Maxx D
> On 23 Dec 2016, at 17:53, Matthew Miller wrote: > >> On Fri, Dec 23, 2016 at 04:49:43PM +0000, Aero Maxx D wrote: >> I'm getting errors like >> >> mod_authnz_pam: PAM authentication failed for user ***: System error >> >> user ***: au

Re: Apache Authentication with System Accounts?

2016-12-23 Thread Aero Maxx D
> On 22 Dec 2016, at 19:26, Matthew Miller wrote: > > What you want to do is create a _new_ file in /etc/pam.d, named > something like "mywebstuff", and then use "AuthPAMService mywebstuff". > > In /etc/pam.d/mywebstuff, something like: > > auth required pam_unix.so debug > account

Re: Apache Authentication with System Accounts?

2016-12-22 Thread Aero Maxx D
> On 22 Dec 2016, at 15:39, Matthew Miller wrote: > > Without further protection, yep. Several things in Fedora you could > use: > > - mod_evasive -- an apache module to protect against brute-force > attacks > - fail2ban -- not just for ssh; have it follow the logs and block at > the firewall

Re: Apache Authentication with System Accounts?

2016-12-22 Thread Aero Maxx D
> On 21 Dec 2016, at 19:48, Matthew Miller wrote: > > You can use mod_authnz_pam — documented at > https://www.adelton.com/apache/mod_authnz_pam/ > > This makes me feel a little bit squicky as a former sysadmin. Make sure > that you're at least using https, and make sure your users are at least

Re: Apache Authentication with System Accounts?

2016-12-22 Thread Aero Maxx D
Sent from my iPhone > On 21 Dec 2016, at 19:48, Matthew Miller wrote: > >> On Wed, Dec 21, 2016 at 07:05:41PM +0000, Aero Maxx D wrote: >> Is it possible to password protect folders/address with system >> account usernames and passwords? >> >> I thou

Apache Authentication with System Accounts?

2016-12-21 Thread Aero Maxx D
Hello Guys, Is it possible to password protect folders/address with system account usernames and passwords? I thought it would be a mod_auth_* package/module but I can't figure out just which one it is from the documentation. Thanks, ___ users mailin