RE: Problems with mod_auth_pam

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



What user is apache running as? The user that apache is running as must have
access to read the password shadow file. Usually the easiest way to do this
is to add the apache user to a group that has read access on /etc/shadow.
However before you do this consider the security implications of doing so.


----------------
Thanks
Jefferson Cowart
Jeff@xxxxxxxxxx  

> -----Original Message-----
> From: pam-list-admin@xxxxxxxxxx 
> [mailto:pam-list-admin@xxxxxxxxxx] On Behalf Of Jim Gifford
> Sent: Monday, December 08, 2003 12:15
> To: PAM
> Subject: Problems with mod_auth_pam
> 
> 
> I'm trying to get PAM support to work on a Apache 2.0.48 
> server. Here is all
> the details I can provide, if you need more information to 
> please ask. I
> want to get this resolved.
> 
> Operating System : LFS 5.0 -- http://www.linuxfromscratch.org
> 
> Error Messages and Configruation
> 
> Apache Error Message
> PAM: user 'jim' - not authenticated: Authentication failure,
> 
> Authorize Log
> httpd(pam_unix)[17433]: authentication failure; logname= 
> uid=103 euid=103
> tty= ruser= rhost=  user=jim
> 
> pam/httpd
> # Begin /etc/pam.d/httpd
> 
> auth     required       pam_unix.so
> account  required       pam_unix.so
> 
> # End /etc/pam.d/httpd
> 
> httpd.conf
> 
> LoadModule auth_pam_module lib/apache/mod_auth_pam.so
> LoadModule auth_sys_group_module lib/apache/mod_auth_sys_group.so
> 
> AuthName "Private Users Only"
> AuthType Basic
> AuthPAM_Enabled On
> AuthPAM_FallThrough On
> AuthMySQLAuthoritative Off
> AuthMySQLKeepAlive Off
> AuthMySQLHost localhost
> AuthMySQLDB apache
> AuthMySQLUserTable private
> AuthMySQLNameField user_name
> AuthMySQLPasswordField user_password
> require valid-user
> order deny,allow
> HostNameLookups on
> UseCanonicalName off
> 
> 
> _______________________________________________
> 
> Pam-list@xxxxxxxxxx
> https://www.redhat.com/mailman/listinfo/pam-list
> 


_______________________________________________

Pam-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/pam-list

[Index of Archives]     [Fedora Users]     [Kernel]     [Red Hat Install]     [Linux for the blind]     [Gimp]

  Powered by Linux