Bug#405773: Mysql auth how then?
Thanks so much for your email.
Ive spent 2 full days on this. I tried both suggested workarounds[1] and with wild and weird results.
Attempting to get mod_authn_dbd to go, as per the apache2 documentation just brought apache to a grinding halt ( does not recognise mod_dbd (paraphrased) load failed. Updated box which brought apache to 2.2.3-4+etch4 .Didnt help.
Compiling and patching mod_auth_mysql-3.0.0.tar.gz simply produced a thousand errors at compile time
libapache2-mod-auth-pam + libpam-mysql NEARLY worked, but refused to let mysql be authoritative even after:
- specifying AuthBasicAuthoritative Off
- using auth sufficient in /etc/pam.d/apache2
- removing pam-unix includes from ditto
The pam-mysql auth passes according to the logs, but then pam-unix stops it if there is no system account with the same username. Password didnt seem to matter.
Pam seems almost there to me, but my queries to pam-list have gone unanswered I think mod_auth_pam has died.
Im nearly to the point of tears on this one[2], and im normally a robust sort.
Its a moderately production box (intranet), so the soln has to be stable, and compatible with LAM(Php). I might be willing to give lenny a go if it means i can just use either mod_authn_dbd or mod_auth_mysql out of the box(package).
Which do you think is going to be the best route. How far is lenny away from stable? Go back to sarge? Would another db solve the problem? Creating a mirror dbm or flatfile? <grasps straws />
Regards
Peter Scott
NZ
[1] http://dev.e-taxonomy.eu/trac/wiki/ApacheMySQLAuthentication
[2] Jeeps i thought debian was supposed to be a server friendly stable "works" kind of thing.
Stefan Fritsch wrote:
On Thursday 28 February 2008, Peter Scott wrote:
Can somebody please, please tell me HOW YOU DO auth with etch
apache 2.2 mysql?
You can't, unfortunately.
Your best bet is probably to grab the apr-util 1.2.12+dfsg-2 source
package from testing, add --with-mysql to the configure line in
debian/rules, install the libmysqlclient15-dev package, and recompile
it on etch.
This has some caveats, however:
- it is not compatible with the php mysql extensions as they are
compiled in etch (might lead to segfaults)
- mod_dbd from apache2 2.2.3 has some bugs that were fixed in 2.2.6,
so I am not sure it works at all, see e.g.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=434562
- apr-util 1.2.12 has a bug that might make apache segfault if you
serve files larger than 2GB on a 32bit system
If you decide to try it, though, I would be interested to hear whether
it works.
Cheers,
Stefan
Reply to: