Bug#762908: apache2-bin: Enable and include mod_authnz_fcgi module
Package: apache2
Version: 2.4.10-1
Severity: wishlist
Dear Maintainer,
I was busy preparing some of our authorization logic from Debian Wheezy's Apache 2.2 to Debian Jessie's Apache 2.4 and ran in to some problems with the fastcgi based access checker. When reading the Apache documentation for 2.4 on their site they now have a built-in mod_authnz_fcgi for this. But this module is currently not enabled in the Debian build.
I couldn't find any indication whether or not this module is experimental, though nothing in the Apache documentation and configure help suggests it is. And it ties in better with the new Apache 2.4 authorization logic than mod_fcgid does.
So could this module please be enabled in apache2 builds?
Regards,
Justin
-- Package-specific info:
-- System Information:
Debian Release: jessie/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (x86_64)
Kernel: Linux 3.14-2-amd64 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
Versions of packages apache2 depends on:
ii apache2-bin 2.4.10-1
ii apache2-data 2.4.10-1
ii lsb-base 4.1+Debian13
ii mime-support 3.56
ii perl 5.20.0-6
ii procps 1:3.3.9-7
Versions of packages apache2 recommends:
pn ssl-cert <none>
Versions of packages apache2 suggests:
pn apache2-doc <none>
pn apache2-suexec-pristine | apache2-suexec-custom <none>
pn apache2-utils <none>
ii w3m [www-browser] 0.5.3-17
Versions of packages apache2-bin depends on:
ii libapr1 1.5.1-2+b1
ii libaprutil1 1.5.3-3
ii libaprutil1-dbd-sqlite3 1.5.3-3
ii libaprutil1-ldap 1.5.3-3
ii libc6 2.19-11
ii libldap-2.4-2 2.4.39-1.1+b1
ii liblua5.1-0 5.1.5-7
ii libpcre3 1:8.35-3
ii libssl1.0.0 1.0.1i-2
ii libxml2 2.9.1+dfsg1-4
ii perl 5.20.0-6
ii zlib1g 1:1.2.8.dfsg-2
Versions of packages apache2-bin suggests:
pn apache2-doc <none>
pn apache2-suexec-pristine | apache2-suexec-custom <none>
ii w3m [www-browser] 0.5.3-17
Versions of packages apache2 is related to:
ii apache2 2.4.10-1
ii apache2-bin 2.4.10-1
-- no debconf information
Binary files apache2-2.4.10.orig/.git/index and apache2-2.4.10/.git/index differ
diff -urBN apache2-2.4.10.orig/debian/config-dir/mods-available/authnz_fcgi.load apache2-2.4.10/debian/config-dir/mods-available/authnz_fcgi.load
--- apache2-2.4.10.orig/debian/config-dir/mods-available/authnz_fcgi.load 1970-01-01 01:00:00.000000000 +0100
+++ apache2-2.4.10/debian/config-dir/mods-available/authnz_fcgi.load 2014-09-26 09:02:39.190581344 +0200
@@ -0,0 +1,2 @@
+# Depends: proxy_fcgi
+LoadModule authnz_fcgi_module /usr/lib/apache2/modules/mod_authnz_fcgi.so
diff -urBN apache2-2.4.10.orig/debian/rules apache2-2.4.10/debian/rules
--- apache2-2.4.10.orig/debian/rules 2014-09-26 09:22:31.226230405 +0200
+++ apache2-2.4.10/debian/rules 2014-09-26 09:00:21.934621283 +0200
@@ -86,7 +86,7 @@
--with-pcre=yes \
--enable-pie \
--enable-mpms-shared=all \
- --enable-mods-shared="all cgi" \
+ --enable-mods-shared="all cgi authnz-fcgi" \
--enable-mods-static="unixd logio watchdog version" \
CFLAGS="$(AP2_CFLAGS)" CPPFLAGS="$(AP2_CPPFLAGS)" LDFLAGS="$(AP2_LDFLAGS)" \
LTFLAGS="$(AP2_LTFLAGS)"
Reply to: