Bug#219774: marked as done (Basic Authenticator broken (unchanged config which has worked))
Your message dated Mon, 17 Nov 2003 18:16:20 +0100 (CET)
with message-id <Pine.LNX.4.58.0311171806190.25908@trider-g7.ext.fabbione.net>
and subject line closing these bugs
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 8 Nov 2003 23:14:31 +0000
>From inet@zombie.inka.de Sat Nov 08 17:14:30 2003
Return-path: <inet@zombie.inka.de>
Received: from quechua.inka.de (mail.inka.de) [193.197.184.2]
by master.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1AIcHm-000183-00; Sat, 08 Nov 2003 17:14:30 -0600
Received: from zombie.inka.de (pd9e4a604.dip.t-dialin.net [217.228.166.4])
by mail.inka.de with asmtp
id 1AIcHl-00044e-00; Sun, 09 Nov 2003 00:14:29 +0100
Received: from inet by zombie.inka.de with local (Exim 4.24)
id 1AIcHY-000478-5O; Sun, 09 Nov 2003 00:14:16 +0100
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Eduard Bloch <blade@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: silently ignores AuthUserFile,
"AuthAuthoritative off" missing in the default config
X-Mailer: reportbug 2.36
Date: Sun, 09 Nov 2003 00:14:16 +0100
Message-Id: <[🔎] E1AIcHY-000478-5O@zombie.inka.de>
Sender: Eduard Bloch <inet@zombie.inka.de>
Delivered-To: submit@bugs.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0
tests=BAYES_30,HAS_PACKAGE
version=2.53-bugs.debian.org_2003_11_7
X-Spam-Level:
X-Spam-Checker-Version: SpamAssassin 2.53-bugs.debian.org_2003_11_7 (1.174.2.15-2003-03-30-exp)
Package: apache
Version: 1.3.29-1
Severity: important
The subject says all: the Debian apache does NOT allow user
authentication as described in the HUNDREDS of docs available in the
net. It just fails and tells "user ... not found" in the error log.
Strace shows that it simply ignores the choosed AuthUserFile. There are
no hints about the possible cause for such behaviour, neither in the
example httpd.conf, nor in README.Debian or in the upstream tutorials
like http://httpd.apache.org/docs/howto/auth.html . Only random googling
helps to find other victims of such stupid defaults.
MfG,
Eduard.
-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux debian 2.4.23-pre2 #1 Mi Sep 3 16:09:39 CEST 2003 i686
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8
Versions of packages apache depends on:
ii apache-common 1.3.29-1 Support files for all Apache webse
ii debconf 1.3.20 Debian configuration management sy
ii dpkg 1.10.18 Package maintenance system for Deb
hi libc6 2.3.2.ds1-9 GNU C Library: Shared libraries an
ii libdb4.1 4.1.25-10 Berkeley v4.1 Database Libraries [
ii libexpat1 1.95.6-6 XML parsing C library - runtime li
ii libmagic1 4.06-1 File type determination library us
ii logrotate 3.6.5-2 Log rotation utility
ii mime-support 3.23-1 MIME files 'mime.types' & 'mailcap
ii perl [perl5] 5.8.1-4 Larry Wall's Practical Extraction
-- debconf information:
* apache/enable-suexec: false
* apache/server-name: localhost
* apache/document-root: /var/www
* apache/server-port: 80
* apache/init: false
* apache/server-admin: edi@gmx.de
---------------------------------------
Received: (at 219774-done) by bugs.debian.org; 17 Nov 2003 17:16:24 +0000
>From fabbione@fabbione.net Mon Nov 17 11:16:23 2003
Return-path: <fabbione@fabbione.net>
Received: from port5.ds1-sby.adsl.cybercity.dk (trider-g7.fabbione.net) [212.242.169.198]
by master.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1ALmz8-0001W9-00; Mon, 17 Nov 2003 11:16:22 -0600
Received: from trider-g7.ext.fabbione.net (port5.ds1-sby.adsl.cybercity.dk [212.242.169.198])
by trider-g7.fabbione.net (Postfix) with ESMTP id 3D58817;
Mon, 17 Nov 2003 18:16:21 +0100 (CET)
Date: Mon, 17 Nov 2003 18:16:20 +0100 (CET)
From: Fabio Massimo Di Nitto <fabbione@fabbione.net>
Sender: fabbione@trider-g7.ext.fabbione.net
To: 218770-done@bugs.debian.org, 219774-done@bugs.debian.org
Cc: Michael Holzt <kju@fqdn.org>
Subject: closing these bugs
Message-ID: <Pine.LNX.4.58.0311171806190.25908@trider-g7.ext.fabbione.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Delivered-To: 219774-done@bugs.debian.org
X-Spam-Status: No, hits=0.0 required=4.0
tests=none
version=2.53-bugs.debian.org_2003_11_15
X-Spam-Level:
X-Spam-Checker-Version: SpamAssassin 2.53-bugs.debian.org_2003_11_15 (1.174.2.15-2003-03-30-exp)
Hi all,
after investigating the problem we found out that mod_auth_sys was
wrongly enabled by apache at install time for version of apache-common <
1.3.28.0.1. I have no way to force the removal of the modules since this
would hit people actually using it, so you have to disable it by yourself.
Michael: if you still hit the other problems mentioned in the report that
are not strictly related to these bugs please be so kind to inform us or
to file another bug.
Thanks
Fabio
--
Our mission: make IPv6 the default IP protocol
"We are on a mission from God" - Elwood Blues
http://www.itojun.org/paper/itojun-nanog-200210-ipv6isp/mgp00004.html
Reply to: