Apache modules and authentication?

Hi.

This is the kind of authentication param I'm using:


AllowOverride None
AuthType Basic
AuthName "Admin"
AuthUserFile /etc/httpd/myauthfile
Require valid-user


I've disabled all the auth modules except these two:
authn_file_module (shared)
authz_host_module (shared)

Now, when I run:
apachectl -t

It says Syntax OK. But, in error log I can see:

[Sat Mar 20 08:12:09 2010] [crit] [client xxx.xxx.xxx.xxx] configuration
error: couldn't check user. No user file?: /admin/xxx


So obviously I'm missing some modules... Is it the basic module or the
user module? And how can I test this, if I currently don't have access
to the web (only ssh), and syntax check is obviously not telling me some
modules are missing.... :-/



--
| Jakov Sosic | ICQ: 28410271 | PGP: 0x965CAE2D |
============================================================ =====
| start fighting cancer -> http://www.worldcommunitygrid.org/ |

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: Apache modules and authentication?

On Sat, Mar 20, 2010 at 6:58 AM, Jakov Sosic wrote:
> Hi.
>
> This is the kind of authentication param I'm using:
>
>
> =A0AllowOverride None
> =A0AuthType Basic
> =A0AuthName "Admin"
> =A0AuthUserFile /etc/httpd/myauthfile
> =A0Require valid-user
>
>
> I've disabled all the auth modules except these two:
> =A0authn_file_module (shared)
> =A0authz_host_module (shared)
>
> Now, when I run:
> apachectl -t
>
> It says Syntax OK. But, in error log I can see:
>
> [Sat Mar 20 08:12:09 2010] [crit] [client xxx.xxx.xxx.xxx] configuration
> error: =A0couldn't check user. =A0No user file?: /admin/xxx

authn_default stops you from falling through.

--=20
Eric Covener
covener@gmail.com

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: Apache modules and authentication?

On 03/20/2010 12:14 PM, Eric Covener wrote:

> authn_default stops you from falling through.

So I should enable authn_default?

--
| Jakov Sosic | ICQ: 28410271 | PGP: 0x965CAE2D |
============================================================ =====
| start fighting cancer -> http://www.worldcommunitygrid.org/ |

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: Apache modules and authentication?

On Sat, Mar 20, 2010 at 8:08 AM, Jakov Sosic wrote:
> On 03/20/2010 12:14 PM, Eric Covener wrote:
>
>> authn_default stops you from falling through.
>
> So I should enable authn_default?

try it and see. Someone probably got trigger-happy disabling
"unneeded" modules in an effort to optimize your server.

--
Eric Covener
covener@gmail.com

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: Apache modules and authentication?

On 03/20/2010 01:26 PM, Eric Covener wrote:
> On Sat, Mar 20, 2010 at 8:08 AM, Jakov Sosic wrote:
>> On 03/20/2010 12:14 PM, Eric Covener wrote:
>>
>>> authn_default stops you from falling through.
>>
>> So I should enable authn_default?
>
> try it and see. Someone probably got trigger-happy disabling
> "unneeded" modules in an effort to optimize your server.
>

That someone was me :) After research and testing, I've found out that I
need the following modules for that piece of configuration to work:

auth_basic_module (shared)
authn_file_module (shared)
authz_user_module (shared)



--
| Jakov Sosic | ICQ: 28410271 | PGP: 0x965CAE2D |
============================================================ =====
| start fighting cancer -> http://www.worldcommunitygrid.org/ |

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org