| kbulgrien 2006-10-20, 7:27 pm |
| An Apache 2.2.3 server is being set up on a GNU/Linux system. The goal
is to use "Require file-group" along with digest authentication to
determine whether a user may access resources on the web server. The
browser in use is always MSIE 6 or 7.
In httpd.conf, the following does not work and gives an error message
in the server log file:
<Directory "/home/httpd/cgi-bin">
AllowOverride All
Options ExecCGI
Order allow,deny
Allow from all
AuthType Digest
AuthName "MyRealm"
AuthDigestDomain edited.edited.net edited localhost 127.0.0.1
192.168.128.28
AuthDigestProvider file
AuthUserFile /home/httpd/digest.user
AuthGroupFile ../../home/httpd/digest.group
Require file-group
Satisfy all
</Directory>
The error log entry is:
[Fri Oct 20 12:55:55 2006] [error] [client 192.168.128.178]
(34)Numerical result out of range: Authorization of user kbulgrien to
access /cgi-bin/test.cgi failed, reason: could not get name of file
group
Simply changing "Require file-group" to "Require group blah" works as
expected. I know that the
user file and group files are correct because they have been in use for
some time. Adding "BrowserMatch "MSIE"
AuthDigestEnableQueryStringHack=On" appears to make no difference.
The following link appears to contain a reference to apr_gid_name_get()
that may be generating the failure message.
http://mail-archives.apache.org/mod...r.apache.org%3E
Is there some basic mistake that has been made that prevents this
"Require file-group" setup from working? Does anyone else have a
working configuration that uses require file-group? Any idea what I
should check?
|