Both use user.group instead of user:group (. is valid in a username) also, mod_auth_external lacks metadata.xml
both sets of fowners are now fixed. lots of packages are missing metadata.xml mod_auth_external was woodchip's work, and if he wants it, he can take it himself.