You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by James Neal <jr...@ece.pdx.edu> on 2002/03/19 01:32:20 UTC

I can't get mod_auth_pam to work

Since I know these are the first two counter questions everyone asks: I
have already both read the Apache 1.3 FAQ and searched an archive for this
mailing list.

This is on a Sun Blade 100 running Solaris 8.

I get the usual authentication prompt, but authentication with my
username and password fails. PAM authentication for other services
(POP/IMAP) on the box is working just fine, which is what leads me to
believe the problem is with my configuration of Apache or the .htaccess
file I am using.

The contents of the .htaccess file are:

 AuthPAM_Enabled on
 AuthType Basic
 AuthName "PAM Test"
 Require valid-user

I based it on what I read from the mod_auth_pam page on sourceforge.

Looking at the webserver logs doesn't seem to be telling me anything that
wasn't already obvious - ie, the authentication is failing. 

_________________________________
James Neal::Solaris/Network Admin|_________
CECS Computing Support::support@cat.pdx.edu




---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: I can't get mod_auth_pam to work

Posted by James Neal <jr...@ece.pdx.edu>.
> My mod_auth_pam experience is limited to Linux.  Here are the things
> that I would check on a RedHat 7.2 box:

Hmm, reading on the web some more, I think my problem is that the
mod_auth_pam apache module is not compatible with Solaris's version of
PAM. (Apparently there are inconsistencies between Solaris's
implementation and the "Linux" PAM.)

Can anyone confirm this guess? Can anyone recommend an apache module that
does PAM authentication that they know is compatible with Solaris's PAM
implementation?

_________________________________
James Neal::Solaris/Network Admin|_________
CECS Computing Support::support@cat.pdx.edu


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: I can't get mod_auth_pam to work

Posted by Luke Scharf <ls...@ee.vt.edu>.
My mod_auth_pam experience is limited to Linux.  Here are the things
that I would check on a RedHat 7.2 box:

1. Look for "/etc/pam.d/httpd".  If it's not there, (and
"/etc/pam.d/other" denies everything), then you should create one.

2.  Check for other Apache authentication mechanisms.  Disable the
others, or set them be non-authoritative ("fallthrough").



Your .htaccess file looks like it should work.  Here the <Directory>
entry that I use, just for reference:

        AuthPAM_Enabled on
        AuthPAM_FallThrough off
        AuthFailDelay 1000
        AuthType Basic
        AuthName "Secure area"
	require valid-user

Hope this helps!
-Luke

On Mon, 2002-03-18 at 19:32, James Neal wrote:
> I get the usual authentication prompt, but authentication with my
> username and password fails. PAM authentication for other services
> (POP/IMAP) on the box is working just fine, which is what leads me to
> believe the problem is with my configuration of Apache or the .htaccess
> file I am using.
> 
> The contents of the .htaccess file are:
> 
>  AuthPAM_Enabled on
>  AuthType Basic
>  AuthName "PAM Test"
>  Require valid-user
> 
> I based it on what I read from the mod_auth_pam page on sourceforge.

-- 
Luke Scharf, Jack of Several Trades
http://www.ccm.ece.vt.edu/~lscharf


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org