Public bug reported:

Binary package hint: apache2

Apache segfaults if a user is not in a required group (it works if you
use AuthType Basic)

So here is my setup

Directory which is protected

/var/www/download

.htaccess
Options +Indexes

AuthType Digest
AuthName "Download Bereich"
AuthDigestFile /etc/apache2/htdigest
AuthDigestGroupFile /etc/apache2/htgroups
AuthDigestDomain /download/
Require valid-user # Also fiddled around with Require group download, same 
result


Directory which contains additional access level

/var/www/download/test

.htaccess
Require group test

As soon if a user is not in the group "test" apache segfaults and you
just get a white blank screen if you accessing the parent directory with
the browser (/var/www/download)

-rw-r--r-- 1 www-data root 50 2007-09-27 05:18 /etc/apache2/htgroups
download: testuser
test: anotheruser

When I use the same files just with AuthType Basic, it works like
expected, it also works if the the user *IS* in the group which is
required

NOTE:
As the Version used in Dapper has no debugging symbols, nor is a -dbg version 
available I cannot provide a backtrace

** Affects: apache2 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
[Dapper][Apache2] mod_auth_digest segfaults if user not in required group
https://bugs.launchpad.net/bugs/145659
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to