Send modauthtkt-users mailing list submissions to
modauthtkt-users@lists.sourceforge.net
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.sourceforge.net/lists/listinfo/modauthtkt-users
or, via email, send a message with subject or body 'help' to
[EMAIL PROTECTED]
You can reach the person managing the list at
[EMAIL PROTECTED]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of modauthtkt-users digest..."
Today's Topics:
1. Re: Building 2.0.0rc1 on Debian Etch (Danny Adair)
2. Re: Building 2.0.0rc1 on Debian Etch (Gavin Carr)
----------------------------------------------------------------------
Message: 1
Date: Sun, 3 Sep 2006 10:19:38 +1200
From: "Danny Adair" <[EMAIL PROTECTED]>
Subject: Re: [modauthtkt-users] Building 2.0.0rc1 on Debian Etch
To: modauthtkt-users@lists.sourceforge.net
Message-ID:
<[EMAIL PROTECTED]>
Content-Type: text/plain; charset="iso-8859-1"
Thanks Gavin,
Sorted itself:
At first I thought, as the ipts() function from the Python sample contrib
does a
ts = ((t & 0xff000000) >> 24,(t & 0xff0000) >> 16,(t & 0xff00) >> 8,t &
0xff)
it might be Python 2.3's different handling of hex/oct constants:
Python 2.4.1 (#2, May 5 2005, 11:32:06)
[GCC 3.3.5 (Debian 1:3.3.5-12)] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> 0xff000000
4278190080L
Python 2.3.5 (#2, Jul 30 2006, 15:57:01)
[GCC 4.1.2 20060715 (prerelease) (Debian 4.1.1-9)] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> 0xff000000
<stdin>:1: FutureWarning: hex/oct constants > sys.maxint will return
positive values in Python 2.4 and up
-16777216
but nope, despite the different representation the actual calculation is
identical.
It was a simple rtfm: TKTAuthIgnoreIP was turned on, but I was using the
client's IP instead of 0.0.0.0.
So: I can confirm that mod_auth_tkt runs on plain Debian sarge with
hand-compiled Python 2.4.1 as well as Debian etch with supplied Python 2.3.5.
Just skip or ignore the complaints of "make test".
Cheers,
Danny
On 8/31/06, Danny Adair <[EMAIL PROTECTED]> wrote:
>
> Thanks Gavin,
>
> I do have all these perl modules installed. Just checked on an
> installation I did on sarge - same test problem, but mod_auth_tkt works fine
> (there).
>
> However, I have a new problem now. I'm trying to use mod_auth_tkt with
> mod_python (the other one was Zope).
> I issue tickets according to your algorithm (or do I?) but they don't seem
> to be valid.
> ------------------------------
> I turned on debugging and the Apache error log says:
> [Thu Aug 31 13:25:02 2006] [warn] [client 58.28.158.45] TKT valid_ticket:
> ticket found, but hash is invalid - digest
> '8917e72be1c207bba6c089eadde33f29', ticket
> 'a5f5113ebd813902eaf127d01b876f8e'
> ------------------------------
> Now the content of that cookie is:
> "a5f5113ebd813902eaf127d01b876f8e44f6c703dadair!"
> ------------------------------
> So I manually went through the steps of re-creating the digest from the
> given cookie:
> Python 2.4.1 (#2, May 5 2005, 11:32:06)
> [GCC 3.3.5 (Debian 1:3.3.5-12)] on linux2
> Type "help", "copyright", "credits" or "license" for more information.
> >>> old_digest = 'a5f5113ebd813902eaf127d01b876f8e'
> >>> hextimestamp = 0x44f6c703
> >>> user_id = 'dadair'
> >>> ip = '58.28.158.45'
> >>> key = "5d46efc0-2e31-ea42-5d33-82bb1abbf1e8"
> >>> t = int(hextimestamp)
> >>> t
> 1157023491
> >>> ip_chars = ''.join(map(chr, map(int, ip.split('.'))))
> >>> ts = ((t & 0xff000000) >> 24,(t & 0xff0000) >> 16,(t & 0xff00) >> 8,t
> & 0xff )
> >>> ts_chars = ''.join(map(chr, ts))
> >>> import md5
> >>> iptstamp = ip_chars + ts_chars
> >>> iptstamp
> ':\x1c\x9e-D\xf6\xc7\x03'
> >>> len(iptstamp)
> 8
> >>> digest0 = md5.new(iptstamp + key + user_id + '\0' + '\0').hexdigest()
> >>> digest0
> 'a5c38854ef883bbb2a044a9b786e3e65'
> >>> new_digest = md5.new(digest0 + key).hexdigest()
> >>> new_digest == old_digest
> True
> ------------------------------
> What am I doing wrong here?
>
> Thank you for your help.
>
> Danny
>
>
> On 8/29/06, Gavin Carr < [EMAIL PROTECTED]> wrote:
> >
> > Hi Danny,
> >
> > On Tue, Aug 29, 2006 at 06:44:16PM +1200, Danny Adair wrote:
> > > On my Debian Etch system with Apache 2.0.55,
> > > - "./configure" doesn't complain
> > > - "make" has a couple of minor (?) warnings
> > > - "make test" fails the majority of tests!
> > > (see full output below)
> > >
> > > What are the dependencies?
> > > I installed the following packages:
> > > - apache2
> > > - apache2-threaded-dev
> > > Then, after a complaint about a missing Apache:TestRun (not mentioned
> > in
> > > docs!!!), I installed
> > > - libapache2-mod-perl2
> > > Then, after a complaint about a missing DateTime.pm (dito), I
> > installed
> > > - libdatetime-perl
> > >
> > > (btw, perl is version 5.008008)
> > >
> > > Now I'm still getting the failed tests as shown below.
> > > Installing (the wild guesses)
> > > - libapache2-mod-perl2-dev
> > > - libapache2-request-perl
> > > didn't do Jack.
> >
> > The tests are really developer tests rather than user tests, which is
> > why they're not really documented. I also don't really have a clue
> > what packages you need for them on debian. I can tell you the perl
> > modules used are:
> >
> > Apache::AuthTkt # included in mod_auth_tkt
> > Apache::Test
> > Apache::TestConfig
> > Apache::TestRequest
> > Apache::TestUtil
> > DateTime
> > File::Basename
> > HTTP::Cookies
> >
> > Sounds like you should have most of the others, but you'll also need
> > LWP (libwww-perl) for HTTP::Cookies, whatever package that comes in.
> >
> > You should run the tests (and configure and make) as a normal user,
> > not root.
> >
> > If you want to run the tests individually with more detail you can do
> > so by changing to the t directory and doing e.g.
> >
> > ./TEST 01_basic.t -verbose
> >
> >
> > Cheers,
> > Gavin
> >
> >
> >
> >
> > -------------------------------------------------------------------------
> > Using Tomcat but need to do more? Need to support web services,
> > security?
> > Get stuff done quickly with pre-integrated technology to make your job
> > easier
> > Download IBM WebSphere Application Server v.1.0.1 based on Apache
> > Geronimo
> > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> >
> > _______________________________________________
> > modauthtkt-users mailing list
> > modauthtkt-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/modauthtkt-users
> >
>
>
>
> --
> Danny W. Adair
> Director
> Unfold Limited
> New Zealand
>
> Talk: +64 4 472 1679
> Fax: +64 4 472 1680
> Write: [EMAIL PROTECTED]
> Browse: www.unfold.co.nz
> Visit/Post: 22a Clifton Terrace, Kelburn 6005, Wellington, New Zealand
>
> ==============================
> Caution
> The contents of this email and any attachments contain information which
> is CONFIDENTIAL to the recipient. If you are not the intended recipient, you
> must not read, use, distribute, copy or retain this email or its
> attachments. If you have received this email in error, please notify us
> immediately by return email or collect telephone call and delete this
> email. Thank you. We do not accept any responsibility for any changes made
> to this email or any attachment after transmission from us.
> ==============================
>
--
Danny W. Adair
Director
Unfold Limited
New Zealand
Talk: +64 4 472 1679
Fax: +64 4 472 1680
Write: [EMAIL PROTECTED]
Browse: www.unfold.co.nz
Visit/Post: 22a Clifton Terrace, Kelburn 6005, Wellington, New Zealand
==============================
Caution
The contents of this email and any attachments contain information which is
CONFIDENTIAL to the recipient. If you are not the intended recipient, you
must not read, use, distribute, copy or retain this email or its
attachments. If you have received this email in error, please notify us
immediately by return email or collect telephone call and delete this
email. Thank you. We do not accept any responsibility for any changes made
to this email or any attachment after transmission from us.
==============================
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://sourceforge.net/mailarchive/forum.php?forum=modauthtkt-users/attachments/20060903/278eb3ca/attachment.html
------------------------------
Message: 2
Date: Sun, 3 Sep 2006 12:35:08 +1000
From: Gavin Carr <[EMAIL PROTECTED]>
Subject: Re: [modauthtkt-users] Building 2.0.0rc1 on Debian Etch
To: modauthtkt-users@lists.sourceforge.net
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=us-ascii
On Sun, Sep 03, 2006 at 10:19:38AM +1200, Danny Adair wrote:
> Thanks Gavin,
> Sorted itself:
>
> At first I thought, as the ipts() function from the Python sample contrib
> does a
> ts = ((t & 0xff000000) >> 24,(t & 0xff0000) >> 16,(t & 0xff00) >> 8,t &
> 0xff)
> it might be Python 2.3's different handling of hex/oct constants:
>
> Python 2.4.1 (#2, May 5 2005, 11:32:06)
> [GCC 3.3.5 (Debian 1:3.3.5-12)] on linux2
> Type "help", "copyright", "credits" or "license" for more information.
> >>>0xff000000
> 4278190080L
>
> Python 2.3.5 (#2, Jul 30 2006, 15:57:01)
> [GCC 4.1.2 20060715 (prerelease) (Debian 4.1.1-9)] on linux2
> Type "help", "copyright", "credits" or "license" for more information.
> >>>0xff000000
> <stdin>:1: FutureWarning: hex/oct constants > sys.maxint will return
> positive values in Python 2.4 and up
> -16777216
>
> but nope, despite the different representation the actual calculation is
> identical.
> It was a simple rtfm: TKTAuthIgnoreIP was turned on, but I was using the
> client's IP instead of 0.0.0.0.
>
> So: I can confirm that mod_auth_tkt runs on plain Debian sarge with
> hand-compiled Python 2.4.1 as well as Debian etch with supplied Python
> 2.3.5.
> Just skip or ignore the complaints of "make test".
Great - thanks for that. At some point I'll get myself on a debian
box and figure out what I need to get to do to get the test suite
working. It's somewhere down the todo list, however. ;-)
Cheers,
Gavin
------------------------------
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
------------------------------
_______________________________________________
modauthtkt-users mailing list
modauthtkt-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/modauthtkt-users
End of modauthtkt-users Digest, Vol 4, Issue 1
**********************************************
