[horde] PAM authentication missing PAM?
Michael M Slusarz
slusarz at horde.org
Mon Jun 13 17:56:51 UTC 2011
Quoting Jan Schneider <jan at horde.org>:
> Zitat von Michael M Slusarz <slusarz at horde.org>:
>
>> Quoting Ole Wolf <ole at naturloven.dk>:
>>
>>> On Mon, 2011-06-13 at 10:16 -0600, Michael M Slusarz wrote:
>>>
>>>> Your PHP is lacking pam support. Install it from PECL.
>>>>
>>>
>>>
>>> That's what I first thought, too, but according to phpinfo(), PHP
>>> already supports PAM:
>>>
>>> pam_auth
>>> Pam Authentication Support active
>>>
>>> Directive Local Value Master Value
>>> pam_auth.servicename php php
>>>
>>> And according to the loaded extensions screen, the extension "pam_auth"
>>> is loaded; indeed, attempting to install it via PECL informs me that
>>> it's already installed:
>>>
>>> # sudo pecl install pam
>>> pecl/pam is already installed and is the same as the released version
>>> 1.0.3
>>> install failed
>>>
>>> So, what could I be missing?
>>
>> You are correct - according to PECL PAM documentation, extension is
>> labeled as 'pam_auth'.
>>
>> In this commit:
>>
>> commit 58d5bf8d27d33133948ae2533393e7c689b74a98
>> Author: Michael Rubinsky <mrubinsk at simon.horde.org>
>> Date: Thu Nov 19 17:14:54 2009 +0000
>>
>> Changes to work with debian/ubuntu based php-pam auth libraries
>>
>> The extension check was changed from 'pam_auth' to 'pam'. Mike R.
>> is probably the one to ask as to why this change was necessary.
>> Wondering if we could change to:
>>
>> if (!Horde_Util::extensionExists('pam') ||
>> !Horde_Util::extensionExists('pam_auth')) {
>>
>> without breaking Debian packages.
>
> It was actually you who did the change :)
>
> http://lists.horde.org/archives/dev/Week-of-Mon-20110321/025992.html
Ummm.... no comment.
In my defense, it looks like the extension is labeled as 'pam_auth',
but the configuration uses the 'pam' namespace:
pam.servicename = "php";
So I think we do want to check for 'pam_auth', although this requires
installation of the pam module from PECL. This is not not confusing.
Fixed in git master.
michael
___________________________________
Michael Slusarz [slusarz at horde.org]
More information about the horde
mailing list