RE: [users@httpd] Apache 2.0.54: Load order of dynamic and static modules

[pa...@aecom.yu.edu]

To share my "load order" trials & errors, at least on OS-X 10.3.9 w/
apache 2.0.54, configured with built in ldap, & mod_auth_mysql version 3
from sourceforge not only is the following load order necessary but the
order of the directory directives which call these modules are equally
important:

mod_access.so
mod_auth_mysql.so
mod_auth.so
mod_ldap.so
mod_auth_ldap.so

To protect a realm with a "fail-through" from ladp to mysql:
<directory /ldap_then_mysql_secured>
blah blah blah
mod_auth_ldap directives
AuthLDAPAuthoritative off
require valid user
mod_auth_mysql directives
AuthLDAPAuthoritative on
require group students
</directory>

To protect a realm with ldap alone:
</directory /ldap_secured>
blah blah blah
mod_auth_mysql directives
AuthMySQLEnable off [IMPORTANT]
require group instructors
mod_auth_ldap directives
AuthLDAPAuthoritative on
require valid-user
</directory>

To protect a mysql realm:
<directory /mysql_secured>
blah blah blah
mod_auth_mysql directives
AuthMySQLAuthoritative on
require group parents
</directory>

The realm protected by mysql alone is pretty straight forward. However,
the realm protected by ldap alone took lots of experimenting to derive. It
appears that the realm needs a "place holder" containing mod_auth_mysql
directives.
Note the realm protected by ldap followed by mysql. If I wanted to first
protect with mysql then by ldap I would have to change the module load
order.

As mentioned several times before in the group, module load order is for
the most part unimportant in apache2 except for a few [those which i need
to use :)]. I worked out the above guided by setting the error level to
debug in httpd.conf.

-bill


> We are talking about Apache 2.0 here. There is no correlation between the
> order in which the LoadModule directives appear, and the order in which
> they are executed like there was in Apache 1.x. Apache 2.0 determines the
> order in which the modules are to be executed itself based on the way the
> handlers are registered, irrespective of whether they are statically or
> dynamically linked.
>
> If you state exactly what your problem is, like what modules you are
> having problems with and the symptoms, someone may be able to give you a
> hint.
>
> -ascs
>
> -----Original Message-----
> From: Lars Ohlén [mailto:lars@ohlen.se]
> Sent: Wednesday, November 16, 2005 10:15 PM
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] Apache 2.0.54: Loadorder of dynamic and static
> modules
>
> How can you be so sure?
> The modules works as expected when they are not loaded togheter!
> And the behavour can see is exactly what should happen if the processing
> order is incorrect.
>
> Lars
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org