RE: [users@httpd] mod_auth_mysql

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello again,
	I'm using apache v2.0.55 and mod_auth_mysql v3 on a Gentoo Linux
box.  Below is a section from my httpd.conf - does it look right?

# These modules provide authentication and authorisation for
# clients. They should not normally be disabled.
#
LoadModule access_module                 modules/mod_access.so
LoadModule auth_module                   modules/mod_auth.so
LoadModule auth_anon_module              modules/mod_auth_anon.so
LoadModule auth_dbm_module               modules/mod_auth_dbm.so
LoadModule auth_digest_module            modules/mod_auth_digest.so

Many thanks,
Michael.


-----Original Message-----
From: paredes [mailto:paredes@xxxxxxxxxxxx] 
Sent: 20 July 2006 19:01
To: users@xxxxxxxxxxxxxxxx
Subject: Re: [users@httpd] mod_auth_mysql

Greetings Michael!

Which versions of apache and mod_auth_mysql are you using? What platform
are you on? When you check your httpd.conf file is mod_auth being
loaded?

Regards,

William  Paredes
Computer Based Education
Albert Einstein College of Medicine
Bronx, New York USA


Michael Luff wrote:
> Hi William,
> 	Thanks for your help on this one.  From what you and Elaine have

> written and from what I've read, this really ought to work but I'm 
> still stuck with the all or nothing problem.
>
> If I modify my file as you suggest, anyone can get access without 
> being prompted for a password, not just the IP I specify; if I comment

> out the 'satisfy any' line, I'm back to passwords for all.
>
> As we agree that the approach is valid, can anyone think of any other 
> commands, directives etc somewhere else that might be having an effect

> on this?
>
> Many thanks,
> Michael.
>
> -----Original Message-----
> From: paredes [mailto:paredes@xxxxxxxxxxxx]
> Sent: 19 July 2006 23:52
> To: users@xxxxxxxxxxxxxxxx
> Subject: Re: [users@httpd] mod_auth_mysql
>
> Greetings Michael!
>
> What should work is the following:
>
> <Directory /var/www/localhost/htdocs>
>
> deny from all
> allow from 10.0.0.72
>
> AuthName "authentication required"
> AuthType Basic
> AuthMySQLHost localhost
> AuthMySQLEnable on
> AuthMySQLUser xxxxxxx
> AuthMySQLPassword xxxxxxx
> AuthMySQLDB auth
> AuthMySQLUserTable users
> AuthMySQLNameField user_name
> AuthMySQLPasswordField user_passwd
> AuthMySQLGroupTable groups
> AuthMySQLGroupField user_group
> Require group user admin
>
> satisfy any
>
> </directory>
>
> William Paredes
> Computer Based education
> Albert Einstein College of Medicine
> Bronx, New York USA
>
>
> Michael Luff wrote:
>   
>> Hi Elaine,
>>
>> Many thanks for the help, I've now got:
>>
>> <Directory /var/www/localhost/htdocs>
>>
>> AuthName "authentication required"
>>
>> AuthType Basic
>>
>> AuthMySQLHost localhost
>>
>> AuthMySQLEnable on
>>
>> AuthMySQLUser xxxxxxx
>>
>> AuthMySQLPassword xxxxxxx
>>
>> AuthMySQLDB auth
>>
>> AuthMySQLUserTable users
>>
>> AuthMySQLNameField user_name
>>
>> AuthMySQLPasswordField user_passwd
>>
>> AuthMySQLGroupTable groups
>>
>> AuthMySQLGroupField user_group
>>
>> # This next line controls which group(s) can access the resource
>>
>> AllowOverride none
>>
>> Require group user admin
>>
>> Order allow,deny
>>
>> Allow from 10.0.0.72
>>
>> Satisfy Any
>>
>> </Directory>
>>
>> But now anyone can access it, not just the IUP address I've
specified!
>>     
>
>   
>> I can't seem to get around this all or nothing problem.
>>
>> Can you see anything I've done wrong?
>>
>> Regards,
>>
>> Michael.
>>
>> *From:* elaine [mailto:elaine@xxxxxxxxxxxxxxxx]
>> *Sent:* 19 July 2006 13:49
>> *To:* users@xxxxxxxxxxxxxxxx
>> *Subject:* Re: [users@httpd] mod_auth_mysql
>>
>> Michael,
>>
>> Try to use the "allow" and "satisfy" directives.
>> This is an example, that we use to protect our intranet access :
>> (Note that the IP's and server name were modified, and we use the 
>> deny
>>     
>
>   
>> directive
>> to refuse connections from reception kiosk.)
>>
>> <Limit GET PUT POST>
>>
>> # Allow access only to authenticated users from MySQL # or users that

>> are in the intranet # (except IP xx.xx.xx.xx : reception kiosk)
>>
>> require valid-user
>> Order allow,deny
>> Deny from xxx.xxx.xx.x
>>
>> # Allow access from our internal network without # username and 
>> password
>>
>> Allow from example.com
>>
>> Satisfy any
>> </Limit>
>>
>>
>> You can read more details about Satisfy directive :
>>
>> http://httpd.apache.org/docs/2.2/mod/core.html#satisfy
>>
>> Regards,
>> Elaine
>>
>> Michael Luff wrote:
>>
>> Hi All,
>>
>> I've got mod_auth_mysql working nicely but I would like the users on 
>> my internal network not to have to enter a username and password, 
>> just
>>     
>
>   
>> people accessing from outside.
>>
>> I've tried various solutions using Order deny,allow; allow from and 
>> so
>>     
>
>   
>> forth but with no luck, I end up with everyone being prompted or
>>     
> no-one.
>   
>> Here's my unmodified <Directory> command from my httpd.conf that 
>> requires everyone to supply a password, can anyone suggest how I can 
>> modify it to allow access from 10.0.0?
>>
>> <Directory /var/www/localhost/htdocs>
>>
>> AuthName "authentication required"
>>
>> AuthType Basic
>>
>> AuthMySQLHost localhost
>>
>> AuthMySQLEnable on
>>
>> AuthMySQLUser xxxxxx
>>
>> AuthMySQLPassword xxxxxxx
>>
>> AuthMySQLDB auth
>>
>> AuthMySQLUserTable users
>>
>> AuthMySQLNameField user_name
>>
>> AuthMySQLPasswordField user_passwd
>>
>> AuthMySQLGroupTable groups
>>
>> AuthMySQLGroupField user_group
>>
>> # This next line controls which group(s) can access the resource
>>
>> require group user admin
>>
>> </Directory>
>>
>> Regards,
>>
>> *Michael Luff** *MSc B.Eng (Hons) MIET* **Facilities & Systems 
>> Manager *
>>
>> T: +44 (0)20 8614 7604
>> F: +44 (0)20 8614 7601
>> M: +44 (0)7976 404956
>> E: Michael.luff@xxxxxxxxxxxxxxxx
>>     
> <mailto:Michael.luff@xxxxxxxxxxxxxxxx>
>   
>> *MailSource UK Limited *
>>
>> - Europe's leading specialist in integrated document delivery
>>     
> solutions
>   
>> - Holders of the RoSPA Health & Safety Gold Medal 2006/2007
>>
>> Northumberland House
>>
>> 15 Petersham Road
>>
>> Richmond-upon-Thames
>>
>> Surrey TW10 6TP
>>
>> *www.mailsource.co.uk <http://www.mailsource.co.uk/>*
>>
>> *MailSource UK Limited *
>>
>> - Europe's leading specialist in integrated document delivery
>>     
> solutions
>   
>> - Holders of the RoSPA Health & Safety Gold Medal 2006/2007
>>
>> Northumberland House
>>
>> 15 Petersham Road
>>
>> Richmond-upon-Thames
>>
>> Surrey TW10 6TP
>>
>> *www.mailsource.co.uk <http://www.mailsource.co.uk/>*
>>
>>     
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server 
> Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>    "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>
>
> MailSource UK Limited     
>
> - Europe's leading specialist in integrated document delivery 
> solutions
> - Holders of the RoSPA Health & Safety Gold Medal 2006/2007
>  
> Northumberland House           
> 15 Petersham Road                
> Richmond-upon-Thames         
> Surrey    TW10 6TP                
>                                                
>  
> www.mailsource.co.uk
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server
Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>    "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>
>
>   


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server
Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


MailSource UK Limited     

- Europe's leading specialist in integrated document delivery solutions
- Holders of the RoSPA Health & Safety Gold Medal 2006/2007
 
Northumberland House           
15 Petersham Road                
Richmond-upon-Thames         
Surrey    TW10 6TP                
                                               
 
www.mailsource.co.uk


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux