Send modauthtkt-users mailing list submissions to
modauthtkt-users@lists.sourceforge.net
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.sourceforge.net/lists/listinfo/modauthtkt-users
or, via email, send a message with subject or body 'help' to
[EMAIL PROTECTED]
You can reach the person managing the list at
[EMAIL PROTECTED]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of modauthtkt-users digest..."
Today's Topics:
1. Re: Building 2.0.0rc1 on Debian Etch (Danny Adair)
----------------------------------------------------------------------
Message: 1
Date: Thu, 31 Aug 2006 23:40:20 +1200
From: "Danny Adair" <[EMAIL PROTECTED]>
Subject: Re: [modauthtkt-users] Building 2.0.0rc1 on Debian Etch
To: modauthtkt-users@lists.sourceforge.net
Message-ID:
<[EMAIL PROTECTED]>
Content-Type: text/plain; charset="iso-8859-1"
Thanks Gavin,
I do have all these perl modules installed. Just checked on an installation
I did on sarge - same test problem, but mod_auth_tkt works fine (there).
However, I have a new problem now. I'm trying to use mod_auth_tkt with
mod_python (the other one was Zope).
I issue tickets according to your algorithm (or do I?) but they don't seem
to be valid.
------------------------------
I turned on debugging and the Apache error log says:
[Thu Aug 31 13:25:02 2006] [warn] [client 58.28.158.45] TKT valid_ticket:
ticket found, but hash is invalid - digest
'8917e72be1c207bba6c089eadde33f29', ticket
'a5f5113ebd813902eaf127d01b876f8e'
------------------------------
Now the content of that cookie is:
"a5f5113ebd813902eaf127d01b876f8e44f6c703dadair!"
------------------------------
So I manually went through the steps of re-creating the digest from the
given cookie:
Python 2.4.1 (#2, May 5 2005, 11:32:06)
[GCC 3.3.5 (Debian 1:3.3.5-12)] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> old_digest = 'a5f5113ebd813902eaf127d01b876f8e'
>>> hextimestamp = 0x44f6c703
>>> user_id = 'dadair'
>>> ip = '58.28.158.45'
>>> key = "5d46efc0-2e31-ea42-5d33-82bb1abbf1e8"
>>> t = int(hextimestamp)
>>> t
1157023491
>>> ip_chars = ''.join(map(chr, map(int, ip.split('.'))))
>>> ts = ((t & 0xff000000) >> 24,(t & 0xff0000) >> 16,(t & 0xff00) >> 8,t &
0xff )
>>> ts_chars = ''.join(map(chr, ts))
>>> import md5
>>> iptstamp = ip_chars + ts_chars
>>> iptstamp
':\x1c\x9e-D\xf6\xc7\x03'
>>> len(iptstamp)
8
>>> digest0 = md5.new(iptstamp + key + user_id + '\0' + '\0').hexdigest()
>>> digest0
'a5c38854ef883bbb2a044a9b786e3e65'
>>> new_digest = md5.new(digest0 + key).hexdigest()
>>> new_digest == old_digest
True
------------------------------
What am I doing wrong here?
Thank you for your help.
Danny
On 8/29/06, Gavin Carr <[EMAIL PROTECTED]> wrote:
>
> Hi Danny,
>
> On Tue, Aug 29, 2006 at 06:44:16PM +1200, Danny Adair wrote:
> > On my Debian Etch system with Apache 2.0.55,
> > - "./configure" doesn't complain
> > - "make" has a couple of minor (?) warnings
> > - "make test" fails the majority of tests!
> > (see full output below)
> >
> > What are the dependencies?
> > I installed the following packages:
> > - apache2
> > - apache2-threaded-dev
> > Then, after a complaint about a missing Apache:TestRun (not mentioned in
> > docs!!!), I installed
> > - libapache2-mod-perl2
> > Then, after a complaint about a missing DateTime.pm (dito), I installed
> > - libdatetime-perl
> >
> > (btw, perl is version 5.008008)
> >
> > Now I'm still getting the failed tests as shown below.
> > Installing (the wild guesses)
> > - libapache2-mod-perl2-dev
> > - libapache2-request-perl
> > didn't do Jack.
>
> The tests are really developer tests rather than user tests, which is
> why they're not really documented. I also don't really have a clue
> what packages you need for them on debian. I can tell you the perl
> modules used are:
>
> Apache::AuthTkt # included in mod_auth_tkt
> Apache::Test
> Apache::TestConfig
> Apache::TestRequest
> Apache::TestUtil
> DateTime
> File::Basename
> HTTP::Cookies
>
> Sounds like you should have most of the others, but you'll also need
> LWP (libwww-perl) for HTTP::Cookies, whatever package that comes in.
>
> You should run the tests (and configure and make) as a normal user,
> not root.
>
> If you want to run the tests individually with more detail you can do
> so by changing to the t directory and doing e.g.
>
> ./TEST 01_basic.t -verbose
>
>
> Cheers,
> Gavin
>
>
>
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job
> easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> modauthtkt-users mailing list
> modauthtkt-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/modauthtkt-users
>
--
Danny W. Adair
Director
Unfold Limited
New Zealand
Talk: +64 4 472 1679
Fax: +64 4 472 1680
Write: [EMAIL PROTECTED]
Browse: www.unfold.co.nz
Visit/Post: 22a Clifton Terrace, Kelburn 6005, Wellington, New Zealand
==============================
Caution
The contents of this email and any attachments contain information which is
CONFIDENTIAL to the recipient. If you are not the intended recipient, you
must not read, use, distribute, copy or retain this email or its
attachments. If you have received this email in error, please notify us
immediately by return email or collect telephone call and delete this
email. Thank you. We do not accept any responsibility for any changes made
to this email or any attachment after transmission from us.
==============================
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://sourceforge.net/mailarchive/forum.php?forum=modauthtkt-users/attachments/20060831/5b46202d/attachment.html
------------------------------
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
------------------------------
_______________________________________________
modauthtkt-users mailing list
modauthtkt-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/modauthtkt-users
End of modauthtkt-users Digest, Vol 3, Issue 4
**********************************************
