Re: configuration issue

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi, Eric.

Actually, I do get the cosign login page. After I've logged in, I get the internal server error. Do you mean that I should move my cosign directives around like this, or something else?

<VirtualHost 141.212.xxx.xxx:1111>
...	[cosign stuff previously up here]
	<IfModule mod_ssl.c>
		...
	</IfModule>
	<IfModule mod_dav.c>
		...
	</IfModule>
	AccessFileName .htaccess
	<Directory "/Library/WebServer/otherdirectory">
		CosignProtected On
		CosignHostname weblogin.umich.edu
		CosignRedirect https://weblogin.umich.edu/
		CosignPostErrorRedirect https://weblogin.umich.edu/post_error.html
		CosignService someserver
CosignCrypto /etc/httpd/ssl_key/server.key /etc/httpd/ssl_key/ someserver_umich_edu.crt /usr/local/etc/apache/certs
		AllowOverride AuthConfig Limit
		AuthType Cosign
		Options All -Indexes +ExecCGI +Includes +MultiViews
		Require user cafrica
	</Directory>
....

In my port 443 virtual host file (the one that gives me SSL in my zope site), I already tried using the <Location> directive and putting my cosign stuff in a subdirectory of the main site. But that broke zope, which is why it's back in its own vhost.

Thanks!

--
Chris Africa
Web Project Manager
Department of Mechanical Engineering
University of Michigan
734-764-8482
Fridays: 734-355-6577
AIM/iChat/Skype ID: baiewola


On Jun 27, 2007, at 1:57 PM, Eric Covener wrote:

On 6/27/07, Chris Africa <cafrica@xxxxxxxxx> wrote:
Hi Everyone.

[Wed Jun 27 08:55:10 2007] [crit] [client 141.212.xxx.xxx]
configuration error:  couldn't check access.  No groups file?: /

ISTR cosign has a weird way of merging some config values -- and it looks
like cosign is declining to participate during authorization.

Have you tried specifying some of the cosign directives in directory
context instead of vhost context (e.g. CosignProtected on)

--
Eric Covener
covener@xxxxxxxxx

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


!DSPAM:4682a51b266991903312405!





---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux