Weblog entry #53 for simonw
See all weblog entries made by simonw.
#53
Apache2: couldn't check access. No groups file?
Posted by simonw on Mon 8 May 2006 at 14:04
Okay, busy trying out the winbind integration with Linux. Obviously would be nice to use ADS groups within Apache authentication.
Installed "libapache2-mod-auth-pam", and user authentication works. Although I filed a bug as it seems to ignore PAM directive "use_first_pass".
However attempts to;
Failed with the error "No groups file?". This error went away when I installed "libapache2-mod-auth-sys-group" as per;
http://rc.vintela.com/topics/apache/mod_pam/#nogroups
One of those things that is obvious the second time you do it ;)
Filed bug report, requesting that mod-auth-pam references mod-auth-sys-group in some way (suggest/recommend). Of course "reportbug" knows the two packages share the same source code, so prompts which of the two packages you mean, but "apt" and "aptitude" are less helpful.
Installed "libapache2-mod-auth-pam", and user authentication works. Although I filed a bug as it seems to ignore PAM directive "use_first_pass".
However attempts to;
Require group "Domain Admins"
Failed with the error "No groups file?". This error went away when I installed "libapache2-mod-auth-sys-group" as per;
http://rc.vintela.com/topics/apache/mod_pam/#nogroups
One of those things that is obvious the second time you do it ;)
Filed bug report, requesting that mod-auth-pam references mod-auth-sys-group in some way (suggest/recommend). Of course "reportbug" knows the two packages share the same source code, so prompts which of the two packages you mean, but "apt" and "aptitude" are less helpful.
Comments on this Entry
Thanks for this post. It solved a frustrating mystery, and removed a road-block. I never would have guessed that I would need yet another apache module just to use groups as opposed to ony users) with mod_auth and mod_auth_pam. Especially, when mod_auth by itself, does provide support for 'require group'.
[ Parent | Reply to this comment ]