[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#784203: libaprutil1-dbd-mysql: mod_authz_dbd's Require group-dbd does not accept multiple groups when returned by MySQL



Package: libaprutil1-dbd-mysql
Version: 1.5.4-1
Severity: important

Dear Maintainer,

   * What led up to the situation?
	I attempted to use the module mod_authz_dbd. It works great in combination with mysql. However, when using the statement "Require group-dbd" a query is issued to the DB asking for the groups that the user is part of. According to documentation 0,1 or more rows may be returned. In the case of 0 and 1 row, the module returns correctly. However when > 1 row is returned, only the last one is read. This seems to be only the case for mysql.

   * What exactly did you do (or not do) that was effective (or
     ineffective)?
	I have not been able to remedy this mysql. However this bug was reported in the apache bug tracker, at https://bz.apache.org/bugzilla/show_bug.cgi?id=46421 which was reported by people to be an effective solution.

   * What was the outcome of this action?
	Authorization keeps failing if the required group is not the last group returned.

   * What outcome did you expect instead?
	I expect that when multiple rows are returned, each one is checked to see if it is the correct group.


-- System Information:
Debian Release: 8.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libaprutil1-dbd-mysql depends on:
ii  libaprutil1       1.5.4-1
ii  libc6             2.19-18
ii  libmysqlclient18  5.5.43-0+deb8u1
ii  zlib1g            1:1.2.8.dfsg-2+b1

libaprutil1-dbd-mysql recommends no packages.

libaprutil1-dbd-mysql suggests no packages.

-- no debconf information

---
This email has been checked for viruses by Avast antivirus software.
http://www.avast.com


Reply to: