Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 548974

Summary: www-apache/mod_auth_pgsql removal request
Product: Gentoo Linux Reporter: Pacho Ramos <pacho>
Component: [OLD] Keywording and StabilizationAssignee: PgSQL Bugs <pgsql-bugs>
Status: RESOLVED FIXED    
Severity: normal CC: titanofold, treecleaner
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---
Bug Depends on: 468302    
Bug Blocks:    

Description Pacho Ramos gentoo-dev 2015-05-09 07:45:19 UTC
needed for apache 2.4
Comment 1 Aaron W. Swenson gentoo-dev 2015-11-16 20:29:56 UTC
Well, I haven't been able to get this module to work for me. It compiles fine, but setting up a auth restricted directory just results in a 500.

Using this:
<Directory "/var/www/localhost/htdocs/test/">
        AuthName "My PostgreSQL Authenticator"
        AuthType basic

        AuthBasicAuthoritative Off
        Auth_PG_authoritative on
        AuthUserFile /dev/null

        Auth_PG_host localhost
        Auth_PG_port 5432
        Auth_PG_user postgres
        Auth_PG_database wwwtest
        Auth_PG_pwd_table valid_users
        Auth_PG_uid_field username
        Auth_PG_pwd_field password
        Auth_PG_encrypted off
        require valid-user
</Directory>

Log output:
============================
[Mon Nov 16 15:23:01.015968 2015] [mpm_event:notice] [pid 4003:tid 140169777203072] AH00489: Apache/2.4.16 (Unix) OpenSSL/1.0.2a mod_auth_pgsql/2.0.3 mod_apreq2-20090110/2.8.0 mod_perl/2.0.8 Perl/v5.20.2 configured -- resuming normal operations

[Mon Nov 16 15:23:01.016199 2015] [core:notice] [pid 4003:tid 140169777203072] AH00094: Command line: '/usr/sbin/apache2 -D DEFAULT_VHOST -D INFO -D SSL -D SSL_DEFAULT_VHOST -D LANGUAGE -D PERL -D PHP5 -D APREQ -D AUTH_PGSQL -d /usr/lib64/apache2 -f /etc/apache2/httpd.conf'

[Mon Nov 16 15:23:14.755650 2015] [authn_core:error] [pid 4007:tid 140169503074048] [client ::1:52850] AH01796: AuthType basic configured without corresponding module
===============================

I'm also up for just removing the module as it's been nearly 10 years since it's had an update and Apache has mod_authn_dbd that can use PostgreSQL.
Comment 2 Aaron W. Swenson gentoo-dev 2016-01-11 15:33:25 UTC
This package has been masked for removal after 2016-03-11.
Comment 3 Aaron W. Swenson gentoo-dev 2016-03-21 16:19:14 UTC
Package has been removed.

commit 31bd551b4294b9dfd39858efc1e8a44b013da966
Author: Aaron W. Swenson <titanofold@gentoo.org>
Date:   Mon Mar 21 12:08:19 2016 -0400

    www-apache/mod_auth_pgsql: Removal
    
    www-apache/mod_auth_pgsql was removed per bug 548974. It hasn’t been
    updated for somewhere around 10 years and has been superseded by
    mod_authn_dbd for quite some time.
    
    Additionally, mod_auth_pgsql is susceptible to severe security bug(s)
    that have gone unresolved by upstream, which has also disappeared.
    
    If you’re still using mod_auth_pgsql, may God have mercy on your soul.
    
    Bug: 255033, 548974