Package: libapache2-mod-auth-pam
Version: 1.1.1-6.1
Followup-For: Bug #394097


If you are using pam authentication exclusively of the apache authentication 
methods, I've found a short term solution until there is an mod-authn-pam 
package availible.

first, disable auth_basic via 

% a2dismod auth_basic

Then you need a directory or .htaccess configuration with, for example,

<Directory /var/www/dspam>
   Options +ExecCGI -Indexes
   DirectoryIndex dspam.cgi
   AllowOverride None

   SSLRequireSSL
   AuthPAM_Enabled on
   AuthType Basic
   AuthName "DSPAM Control Center"
   Require group users
</Directory>

That, followed by an

% invoke-rc.d apache2 force-reload 

Will give you working pam authentication. The trick is to avoid "Require 
valid-user". It does not work. "Require group xxx" does. There may well be 
others which are sucessful, but these are the only ones that I've tested.

My enabled modules are:

alias.load            authz_user.load  fcgid.conf        ssl.load
authn_file.load       autoindex.load   fcgid.load        status.load
auth_pam.load         cgid.conf        mime.load         suexec.load
auth_sys_group.load   cgid.load        negotiation.load  usertrack.load
authz_default.load    dir.conf         rewrite.load
authz_groupfile.load  dir.load         setenvif.load
authz_host.load       env.load         ssl.conf

cheers,

kirstin

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (700, 'stable'), (625, 'testing'), (600, 'unstable')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-4-amd64
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages libapache2-mod-auth-pam depends on:
ii  apache2.2-common            2.2.3-4      Next generation, scalable, extenda
ii  libc6                       2.3.6.ds1-13 GNU C Library: Shared libraries
ii  libpam0g                    0.79-4       Pluggable Authentication Modules l

libapache2-mod-auth-pam recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to