Help with AuthDBI, getting stuck :-/

[Andrew Whyte <a....@cqu.edu.au>]

Hi guys,

I'm totally stuck with this, and I'm desperate to get a working solution.

I have a Tru64 Unix machine, running mod_perl-1.26, Apache 1.3.22
and I've installed the ApacheDBI-0.88 and DBI-1.18 stuff.

I am connecting to an Oracle database on another host,
running 8.1.6 client libs on the web host.

Oracle's sqlplus works perfectly fine to test the DB connection.



I've got the following in my httpd.conf




  SetEnv ORACLE_BASE "/usr/local/oracle"
  SetEnv ORACLE_HOME "/usr/local/oracle/product/8.1.6"
  PassEnv ORACLE_BASE
  PassEnv ORACLE_HOME
  SetEnv ORAENV_ASK NO
  SetEnv LD_LIBRARY_PATH "/usr/local/lib:/usr/local/oracle/product/8.1.6/lib"
  SetEnv ORACLE_SID ACNTS
  PerlModule Apache::AuthDBI
  PerlRequire  /usr/local/WWW/apache-1.3.22/conf/startup.pl




I then have this in the .htaccess file of the folder I'm trying to protect:





  AuthName "DBI Login"
  AuthType Basic

  PerlAuthenHandler Apache::AuthDBI::authen

  PerlSetVar Auth_DBI_data_source   dbi:Oracle:ACNTS
  PerlSetVar Auth_DBI_username      acnts_user
  PerlSetVar Auth_DBI_password      acnts_password
  # DBI->connect($data_source, $username, $password)

  PerlSetVar Auth_DBI_pwd_table     stud_security
  PerlSetVar Auth_DBI_uid_field     username
  PerlSetVar Auth_DBI_pwd_field     sys.pass_dec(password)
  #SELECT pwd_field FROM pwd_table WHERE uid_field=$user

  #PerlSetVar Auth_DBI_encrypted     off
  #PerlSetVar Auth_DBI_authoritative on
  #PerlSetVar Auth_DBI_nopasswd off

  require valid-user




I have the following in my  startup.pl file




#!/usr/local/bin/perl -w

# to load this file when the server starts, add this to httpd.conf:
# PerlRequire /path/to/startup.pl

# make sure we are in a sane environment.
$ENV{GATEWAY_INTERFACE} =~ /^CGI-Perl/ or die "GATEWAY_INTERFACE not Perl!";

use Apache::Registry;
use Apache::Status;
use Apache::DBI;
use Apache::AuthDBI;
use strict;

# optional configuration for Apache::DBI.pm:

# choose debug output: 0 = off, 1 = quiet, 2 = chatty
$Apache::DBI::DEBUG = 2;

# configure all connections which should be established during server startup.
# keep in mind, that if the connect does not succeeed, your server won't start
# until the connect times out (database dependent) !
# you may use a DSN with attribute settings specified within

Apache::DBI->connect_on_init("dbi:Oracle(AutoCommit=>1):ACNTS", "acntsdba", "acntsdba");

# configure the ping behavior of the persistent database connections
# you may NOT not use a DSN with attribute settings specified within
# $timeout = 0  -> always ping the database connection (default)
# $timeout < 0  -> never  ping the database connection
# $timeout > 0  -> ping the database connection only if the last access
#                  was more than timeout seconds before

my $timeout = 0 ;

Apache::DBI->setPingTimeOut("dbi:Oracle:ACNTS", $timeout);

# optional configuration for Apache::AuthDBI.pm:

# choose debug output: 0 = off, 1 = quiet, 2 = chatty
$Apache::AuthDBI::DEBUG = 2;

# set lifetime in seconds for the entries in the cache
Apache::AuthDBI->setCacheTime(60);

# set minimum time in seconds between two runs of the handler which cleans the cache
Apache::AuthDBI->setCleanupTime(-1);

# use shared memory of given size for the cache
#Apache::AuthDBI->initIPC(50000);

1;




As you can see, this is pretty much textbook configuration from all the man/help/perldoc's
I've been able to dig up...

Here is a trace from the error.log file:

==========
5960 Apache::AuthDBI::authen request type = >initial main<
REQUEST:
GET /PastExams/AssocLogo.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
Accept-Language: en-au
Authorization: Basic dGVzdDp0ZXN0dXNl
Connection: Keep-Alive
Host: association-test.cqu.edu.au
If-Modified-Since: Mon, 30 Apr 2001 04:45:19 GMT
If-None-Match: "1d394-1d7d-3aeceddf"
Referer: http://association-test.cqu.edu.au/PastExams/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

HTTP/1.1 (null)

5960 Apache::AuthDBI::authen get_basic_auth_pw: res = >0<, password sent = >testuse<
5960 Apache::AuthDBI::authen user sent = >test<
5960 Apache::AuthDBI::authen Config{ pwdcasesensitive } = on
5960 Apache::AuthDBI::authen Config{ pwd_whereclause  } =
5960 Apache::AuthDBI::authen Config{ placeholder      } = off
5960 Apache::AuthDBI::authen Config{ log_field        } =
5960 Apache::AuthDBI::authen Config{ uid_field        } = username
5960 Apache::AuthDBI::authen Config{ authoritative    } = on
5960 Apache::AuthDBI::authen Config{ data_source      } = dbi:Oracle:ACNTS
5960 Apache::AuthDBI::authen Config{ grp_field        } =
5960 Apache::AuthDBI::authen Config{ encrypted        } = on
5960 Apache::AuthDBI::authen Config{ pwd_field        } = sys.pass_dec(password)
5960 Apache::AuthDBI::authen Config{ nopasswd         } = off
5960 Apache::AuthDBI::authen Config{ grp_table        } =
5960 Apache::AuthDBI::authen Config{ pwd_table        } = stud_security
5960 Apache::AuthDBI::authen Config{ password         } = acnts_password
5960 Apache::AuthDBI::authen Config{ log_string       } =
5960 Apache::AuthDBI::authen Config{ uidcasesensitive } = on
5960 Apache::AuthDBI::authen Config{ encryption_salt  } = password
5960 Apache::AuthDBI::authen Config{ username         } = acnts_user
5960 Apache::AuthDBI::authen Config{ grp_whereclause  } =
5960 Apache::AuthDBI::authen passwd not found in cache




The problem I have is that I can enter absolutly ANY username with or
without a Password and it always let's me through.. It should DECLINE!

I found a trace test on the web showing the SELECT statement being used. I just can't
get mine to do that.. I've tried this every which way, nothings working..


I would love some help in trying to figure this out.


Thanks heaps, Andrew.


More info:

bash-2.02# perl -v

This is perl, version 5.004_04 built for alpha-dec_osf

Copyright 1987-1997, Larry Wall

Perl may be copied only under the terms of either the Artistic License or the
GNU General Public License, which may be found in the Perl 5.0 source kit.

bash-2.02# perl -V
Summary of my perl5 (5.0 patchlevel 4 subversion 4) configuration:
  Platform:
    osname=dec_osf, osvers=4.0, archname=alpha-dec_osf
    uname='osf1 hendrix.cqu.edu.au v4.0 1229 alpha '
    hint=recommended, useposix=true, d_sigaction=define
    bincompat3=y useperlio=undef d_sfio=undef
  Compiler:
    cc='cc', optimize='-O4', gccversion=
    cppflags='-std -D_INTRINSICS -D__LANGUAGE_C__'
    ccflags ='-std -D_INTRINSICS -D__LANGUAGE_C__'
    stdchar='unsigned char', d_stdstdio=define, usevfork=false
    voidflags=15, castflags=0, d_casti32=define, d_castneg=define
    intsize=4, alignbytes=8, usemymalloc=y, prototype=define
  Linker and Libraries:
    ld='ld', ldflags =' -L/usr/local/lib'
    libpth=/usr/local/lib /usr/shlib /shlib /lib /usr/lib /usr/ccs/lib
    libs=-ldbm -ldb -lm
    libc=/usr/shlib/libc.so, so=so
    useshrplib=false, libperl=libperl.a
  Dynamic Linking:
    dlsrc=dl_dlopen.xs, dlext=so, d_dlsymun=undef, ccdlflags=' '
    cccdlflags=' ', lddlflags='-shared -expect_unresolved "*" -O4 -msym -s -L/usr/local/lib'


Characteristics of this binary (from libperl):
  Built under dec_osf
  Compiled at Sep  3 1999 09:08:13
  @INC:
    /usr/local/lib/perl5/alpha-dec_osf/5.00404
    /usr/local/lib/perl5
    /usr/local/lib/perl5/site_perl/alpha-dec_osf
    /usr/local/lib/perl5/site_perl
    .