Module mod_auth_pwcheck

for Apache web server software

© Anton Voronin (anton@urc.ac.ru), 2001, 2002.

This module provides the way for user authentication via the system password database using the pwcheck daemon from the Cyrus SASL package and for group authorization via /etc/group file.

Status: Extension
Source File: mod_auth_pwcheck.c
Module Identifier: auth_pwcheck_module
Compatibility: Available for Apache 1.1. and later

Summary

This module provides the way for user authentication using the pwcheck daemon from the Cyrus SASL package. This lets the authentication to be done via the system password file without root permissions. The module also optionally provides access control via the system group file instead of any special group file used by the standard mod_auth_* modules.

To have this module working add the user under which your web server is running to the group "cyrus" and ensure that /var/pwcheck is readable and searchable by group.

Directives

See also Satisfy and Require Apache core directives.


AuthPwcheck directive

Syntax: AuthPwcheck < on | off >
Default: AuthPwcheck off
Context: directory, .htaccess
Override: AuthConfig
Status: Extension
Module: mod_auth_pwcheck

This directive turns use of this module on or off. Authentication is done via pwcheck daemon only in those directories where this directive is set to on.

See also AuthName, AuthType, AuthGroupFile and UseSystemGroupFile.

AuthPwcheckAuthoritative directive

Syntax: AuthPwcheckAuthoritative < on | off >
Default: AuthPwcheckAuthoritative on
Context: directory, .htaccess
Override: AuthConfig
Status: Extension
Module: mod_auth_pwcheck

This directive controls whether to pass access control to subsequent auth modules in case authentication or authorization fails.

UseSystemGroupFile directive

Syntax: UseSystemGroupFile < on | off >
Default: UseSystemGroupFile on
Context: directory, .htaccess
Override: AuthConfig
Status: Extension
Module: mod_auth_pwcheck

This directive lets you use the system group file (/etc/group) for authorization instead of any special group files used by the standard mod_auth_* apache modules. This sometimes may be useful when you make some parts of your web server document tree to belong to different system groups and wish the authenticated users accessing them to be authorized according to the same groups. If you don't enable this and still wish to do access control using groups, then you should ensure that one of the standard authentication modules is also in use.

See also AuthName, AuthType, AuthGroupFile and AuthPwcheck.

Installation

  1. Unpack the module and cd into the source directory.
  2. Run make on FreeBSD (or pmake on Linux), optionally with APXS=/path/to/apxs parameter if apxs program is not in your PATH.
  3. Then run make install, again pointing APXS path if needed.
  4. Configure and restart your Apache server.


Download version 1.1