httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 41276] New: - Satisfy Any does not work if there is a require group
Date Tue, 02 Jan 2007 14:28:59 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=41276>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=41276

           Summary: Satisfy Any does not work if there is a require group
           Product: Apache httpd-2
           Version: 2.2.3
          Platform: Other
        OS/Version: Linux
            Status: NEW
          Severity: minor
          Priority: P2
         Component: Core
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: seth@psydpu.adsl.dk


The documentation does not discuss "require group"
as part of the Satisfy directive, but if the
assumption is that either a specified valid username
OR membership in a specified group should be
sufficient for access, then the following error message 
should not appear: 

[error] Authorization of user user-not-in-group to access /filename failed, 
reason: user is not part of the 'require'ed group(s).

In fact, I did get that error message, using the following
set of directives (which worked without problem under Apache 1.3.33
and earlier)

<Files filename>
AuthDBMUserFile /etc/apache2/userbase
AuthBasicProvider dbm
AuthGroupFile /etc/apache2/userbase.group
AuthType Basic
AuthDBMType GDBM
Satisfy Any
        order deny,allow
        deny from all
        require user user-not-in-group
        require group groupname
</Files>

I realise GDBM is "old" but should not be the source of the problem.

It is possible to access this file, using authentication, if a person is a 
member of the group, so I assume the problem is not with the implementation of 
GDBM and authentication in general.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message