Bug 209172 – www-apache/mod_auth_pgsql needs AuthBasicAuthoritative Off w/ apache-2.2.x

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Calum 2008-02-06 20:06:42 UTC]

Hello.

Fresh install of 
apache-2.2.6-r7  USE="ssl -debug -doc -ldap (-selinux) -sni -static -suexec -threads" APACHE2_MODULES="actions alias asis auth_basic auth_digest authn_alias authn_anon authn_dbd authn_default authn_file authz_default authz_groupfile authz_host authz_user autoindex cache dav deflate dir env expires filter headers include info log_config logio mime negotiation rewrite setenvif speling status unique_id userdir usertrack -authn_dbm -authz_dbm -authz_owner -cern_meta -charset_lite -dav_fs -dav_lock -dbd -disk_cache -dumpio -ext_filter -file_cache -ident -imagemap -log_forensic -mem_cache -mime_magic -proxy -proxy_ajp -proxy_balancer -proxy_connect -proxy_ftp -proxy_http -version -vhost_alias" APACHE2_MPMS="-event -itk -peruser -prefork -worker"

APACHE2_OPTS="-D DEFAULT_VHOST -D INFO -D SSL -D SSL_DEFAULT_VHOST -D PHP5 -D AUTH_PGSQL -D USERDIR"

and mod_auth_pgsql-2.0.3-r1.

Everything left as default.
1 new NameVirtualHost added.
The virtual host is configured to use mod_auth_pgsql.
However, when visiting the virtual host, I am prompted for my username and password, but it fails.
In apache2/error_log:
[error] Internal error: pcfg_openfile() called with NULL filename

It looks to me as though the file authentication module is getting in the way of the PG module. This is because, if I add a AuthUserFile statement in the Vhost that uses auth_pgsql, the error changes.

Everything used to work (file, and pgsql auth) under Apache 2.0.

Surely other people must use vhosts with different authentication methods?

Reproducible: Always

Steps to Reproduce:




Portage 2.1.3.9 (default-linux/amd64/2006.1/desktop, gcc-3.4.6, glibc-2.5-r4, 2.6.19.1 x86_64)
=================================================================
System uname: 2.6.19.1 x86_64 AMD Athlon(tm) 64 Processor 3000+
Timestamp of tree: Wed, 06 Feb 2008 04:30:01 +0000
app-shells/bash:     3.2_p17
dev-java/java-config: 1.3.7, 2.0.33-r1
dev-lang/python:     2.4.4-r6
dev-python/pycrypto: 2.0.1-r6
sys-apps/baselayout: 1.12.9-r2
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.61
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1, 1.10
sys-devel/binutils:  2.16.1-r3
sys-devel/gcc-config: 1.3.16
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.17-r1
ACCEPT_KEYWORDS="amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config /var/bind"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/terminfo"
CXXFLAGS="-O2 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks metadata-transfer parallel-fetch sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://gentoo.virginmedia.com http://gentoo.osuosl.org http://ftp.belnet.be/mirror/rsync.gentoo.org/gentoo http://www.mirrorservice.org/sites/www.ibiblio.org/gentoo http://distfiles.gentoo.org http://www.ibiblio.org/pub/Linux/distributions/gentoo"
LINGUAS="en_GB en"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/dump/portagetmpdir"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage/layman/voip /usr/local/portage/layman/x11 /usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="a52 aac aalib acl aim alsa amd64 amr amrnb amrwb apache2 aper avi berkdb bzip2 bzlib cdparanoia crypt dga directfb divx4linux dlloader dri dv dvb dvd dvdr dvdread encode faac faad ffmpeg fla flac flash gd-external gdbm gif gmp gphoto2 gtk2 hardened ieee1394 imlib ipv6 jabber jack java java5 jpeg kde live lm_sensors logrotate lzo mad maildir matroska mozbranding moznopango mozsvg mp3 mp4 mpeg mpeg4 mplayer msn network nls nodrm nptl nsplugin ntlm ogg oggvorbis opengl oscar pam pcre perl php png postgres quotas rrdtool rtc samba sdl session sftplogging ssl svg tcpd tga theora tiff truetype truetype-fonts ukcid underscores unicode v4l v4l2 voodoo3 vorbis xanim xfs xml2 xorg xv xvid xvmc yahoo yv12 zaptel zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x   ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3    trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="access auth auth_anon auth_digest alias file-cache echo charset-lite cache disk-cache mem-cache ext-filter filter case_filter case-filter-in deflate mime-magic cern-meta expires headers usertrack unique-id info include cgi cgid dav dav-fs vhost-alias speling rewrite log_config logio env setenvif mime status autoindex asis negotiation dir imap actions userdir so unique_id authz_host authz_user auth_basic authn_alias authn_anon authn_dbd authn_default authz_default authz_groupfile authn_file" DVB_CARDS="tda1004x" ELIBC="glibc" INPUT_DEVICES="evdev keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en_GB en" LIRC_DEVICES="devinput" USERLAND="GNU" VIDEO_CARDS="vesa fglrx radeon v4l"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, MAKEOPTS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

[Comment 1 Jakub Moc (RETIRED) 2008-02-06 20:14:22 UTC]

You need AuthBasicAuthoritative Off.

[Comment 2 Calum 2008-02-06 22:45:38 UTC]

Yep, that seems to have done it.
I needed AuthUserFile /dev/null too though, to stop it complaining in the logs.

Thanks Jakub.

[Comment 3 Jakub Moc (RETIRED) 2008-02-06 22:52:10 UTC]

Should add some comments there or make it default.

[Comment 4 Benedikt Böhm (RETIRED) 2008-02-07 21:39:27 UTC]

is there any reason why you cannot use mod_authn_dbd with the postgres driver?

[Comment 5 Calum 2008-02-07 22:43:17 UTC]

I tried with mod_dbd, but it didn't allow me to store hashes of passwords in the DB.

I.e. I needed to do SELECT shapwhash FROM users WHERE username = 'xxxxx';

And mod_dbd isn't set up for that. Not that I could make work, anyway.

I didn't try mod_authn_dbd. mod_auth_pgsql supports logging too, as well as some other features.

[Comment 6 Benedikt Böhm (RETIRED) 2008-03-23 00:00:30 UTC]

(In reply to comment #3)
> Should add some comments there or make it default.
> 

in cvs