You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2020/02/23 13:08:54 UTC

[Bug 64172] New: Error 'user doesn't appear in group file'

https://bz.apache.org/bugzilla/show_bug.cgi?id=64172

            Bug ID: 64172
           Summary: Error 'user doesn't appear in group file'
           Product: Apache httpd-2
           Version: 2.4.41
          Hardware: PC
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_authz_groupfile
          Assignee: bugs@httpd.apache.org
          Reporter: tm8544@hotmail.com
  Target Milestone: ---

Consider the following Auth container:

<RequireAny>
   Require group MY_USERS
   Require user User_X
</RequireAny>

User_X is not included in group file MY_USERS.
When I access the site as User_X, access is granted but there is an error in
Apache log.

module authz_groupfile logs the following error:
authz_groupfile:error pid 3448:tid 4880 client XXX.XXX.XXX.XXX:53607 AH01666:
Authorization of user User_X to access /index.php failed, reason: user doesn't
appear in group file (XXXXXXXXX_MY_GROUP).

But considering the container there is no error, so why log it as an error?
Would a notice do?

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

[Bug 64172] Error 'user doesn't appear in group file'

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=64172

--- Comment #4 from tm8544@hotmail.com ---
I did that as a temporaty solution.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

[Bug 64172] Error 'user doesn't appear in group file'

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=64172

Christophe JAILLET <ch...@wanadoo.fr> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #5 from Christophe JAILLET <ch...@wanadoo.fr> ---
Backported in 2.4.x in r1874907

This is part of 2.4.42

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

[Bug 64172] Error 'user doesn't appear in group file'

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=64172

Eric Covener <co...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 OS|                            |All

--- Comment #1 from Eric Covener <co...@gmail.com> ---
(In reply to tm8544 from comment #0)
> Consider the following Auth container:
> 
> <RequireAny>
>    Require group MY_USERS
>    Require user User_X
> </RequireAny>
> 
> User_X is not included in group file MY_USERS.
> When I access the site as User_X, access is granted but there is an error in
> Apache log.
> 
> module authz_groupfile logs the following error:
> authz_groupfile:error pid 3448:tid 4880 client XXX.XXX.XXX.XXX:53607
> AH01666: Authorization of user User_X to access /index.php failed, reason:
> user doesn't appear in group file (XXXXXXXXX_MY_GROUP).
> 
> But considering the container there is no error, so why log it as an error?
> Would a notice do?

notice is quite high too.  There were a handful of these kinds of things that
cropped up in early 2.4 that were suppressed.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

[Bug 64172] Error 'user doesn't appear in group file'

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=64172

Eric Covener <co...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |FixedInTrunk

--- Comment #2 from Eric Covener <co...@gmail.com> ---
Dropped to INFO in trunk and proposed for 2.4.x

http://svn.apache.org/r1874424

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

[Bug 64172] Error 'user doesn't appear in group file'

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=64172

--- Comment #3 from Eric Covener <co...@gmail.com> ---
For posterity, maybe you can add the user w/ no groups to the groupfile to
suppress the message.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org