[horde] PAM authentication missing PAM?

Michael M Slusarz slusarz at horde.org
Mon Jun 13 17:56:51 UTC 2011


Quoting Jan Schneider <jan at horde.org>:

> Zitat von Michael M Slusarz <slusarz at horde.org>:
>
>> Quoting Ole Wolf <ole at naturloven.dk>:
>>
>>> On Mon, 2011-06-13 at 10:16 -0600, Michael M Slusarz wrote:
>>>
>>>> Your PHP is lacking pam support.  Install it from PECL.
>>>>
>>>
>>>
>>> That's what I first thought, too, but according to phpinfo(), PHP
>>> already supports PAM:
>>>
>>>               pam_auth
>>> Pam Authentication Support 	active
>>>
>>> Directive	Local Value	Master Value
>>> pam_auth.servicename	php	php
>>>
>>> And according to the loaded extensions screen, the extension "pam_auth"
>>> is loaded; indeed, attempting to install it via PECL informs me that
>>> it's already installed:
>>>
>>> # sudo pecl install pam
>>> pecl/pam is already installed and is the same as the released version
>>> 1.0.3
>>> install failed
>>>
>>> So, what could I be missing?
>>
>> You are correct - according to PECL PAM documentation, extension is  
>> labeled as 'pam_auth'.
>>
>> In this commit:
>>
>> commit 58d5bf8d27d33133948ae2533393e7c689b74a98
>> Author: Michael Rubinsky <mrubinsk at simon.horde.org>
>> Date:   Thu Nov 19 17:14:54 2009 +0000
>>
>>    Changes to work with debian/ubuntu based php-pam auth libraries
>>
>> The extension check was changed from 'pam_auth' to 'pam'.  Mike R.  
>> is probably the one to ask as to why this change was necessary.   
>> Wondering if we could change to:
>>
>> if (!Horde_Util::extensionExists('pam') ||  
>> !Horde_Util::extensionExists('pam_auth')) {
>>
>> without breaking Debian packages.
>
> It was actually you who did the change :)
>
> http://lists.horde.org/archives/dev/Week-of-Mon-20110321/025992.html

Ummm.... no comment.

In my defense, it looks like the extension is labeled as 'pam_auth',  
but the configuration uses the 'pam' namespace:

pam.servicename = "php";

So I think we do want to check for 'pam_auth', although this requires  
installation of the pam module from PECL.  This is not not confusing.

Fixed in git master.

michael

___________________________________
Michael Slusarz [slusarz at horde.org]



More information about the horde mailing list