>Number: 2027
>Category: mod_auth-any
>Synopsis: Authentication via mod_auth_dbm fails.
>Confidential: no
>Severity: non-critical
>Priority: medium
>Responsible: apache
>State: open
>Class: sw-bug
>Submitter-Id: apache
>Arrival-Date: Wed Apr 1 13:30:01 PST 1998
>Last-Modified:
>Originator: [EMAIL PROTECTED]
>Organization:
apache
>Release: 1.3b5
>Environment:
Debian GNU/Linux 2.0 (frozen)
GCC 2.7.2.3
uname -a:
Linux vertigo 2.0.33 #2 Thu Mar 19 12:44:04 EST 1998 i586 unknown
LibGDBM version 1.7.3
>Description:
Authentication via DBM files seems to be broken for GDBM. I have seen other
such problems reported on the list, so it's not just me.
Pertinent files follow:
.htaccess (from the /usr/local/apache/htdocs/ dir):
AuthType Basic
AuthName "Vertigo Apache Server"
AuthDBMUserFile /usr/local/apache/user_db
AuthDBMGroupFile /usr/local/apache/group_db
<Limit GET POST>
require valid-user
</Limit>
ls -l from /usr/local/apache:
-rw-r--r-- 1 125 root 12553 Jan 13 23:03 ABOUT_APACHE
-rw-r--r-- 1 125 root 1881 Feb 13 19:58 Announcement
-rw-r--r-- 1 125 root 6624 Jan 13 18:10 CHANGES
-rw-r--r-- 1 125 root 12259 Nov 19 04:46 KEYS
-rw-r--r-- 1 125 root 2671 Jan 7 11:45 LICENSE
-rw-r--r-- 1 125 root 647 Sep 16 1997 Makefile
-rw-r--r-- 1 125 root 4471 Nov 25 04:47 README
-rw-r--r-- 1 125 root 6751 Oct 27 15:22 README.NT
drwxr-xr-x 2 125 root 1024 Feb 13 20:04 cgi-bin
drwxr-xr-x 2 125 root 1024 Mar 31 15:48 conf
-rwxr-xr-x 1 root root 6168 Apr 1 15:34 dbmmanage
-rw-r--r-- 1 root root 24 Apr 1 15:55 group_db
drwxr-xr-x 5 wntrmute users 1024 Apr 1 15:54 htdocs
-rwxr-xr-x 1 root root 8141 Apr 1 15:54 htpasswd
-rwxr-xr-x 1 root root 1362683 Apr 1 15:31 httpd
drwxr-xr-x 2 125 root 2048 Feb 13 20:04 icons
drwxr-xr-x 2 125 root 1024 Apr 1 15:32 logs
drwxr-xr-x 11 125 root 1024 Apr 1 15:31 src
-rw-r--r-- 1 root root 21 Apr 1 15:55 user_db
Error snippet from Apache Error Log:
[Wed Apr 1 15:53:26 1998] [error] (2)No such file or directory: could not open
dbm auth file: /usr/local/apache/user_db
[Wed Apr 1 15:53:26 1998] [error] DBM user gstone not found: /usr/local/apache/
htdocs
>How-To-Repeat:
Get a copy of Debian Linux 2.0, install, then grab the source for Apache 1.3b5
and compile. Voila!
>Fix:
I imagine this has something to do with incompatibilities between libgdbm and
the mod_auth_dbm module.
As dbmmanage works just fine to create, view, update, etc.. the file, I can't
begin to speculate on where the exact problem is.
Oh, and to answer the questions you've already asked others.
I have tried both with and without AuthDBMAuthoritative, I have made sure my
paths were correct, and have specified -lgdbm as the only extra library to
include in the Configuration file.
%0
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include <[EMAIL PROTECTED]> in the Cc line ]
[and leave the subject line UNCHANGED. This is not done]
[automatically because of the potential for mail loops. ]
