[Security Firewall] Problems after installation of naat-packages from CVS

"Stephan Eck" <[email protected]> Thu, 4 Aug 2005 11:19:26 +0200
Newsgroups gmane.linux.mandrake.security.firewall
Message-ID <[email protected]>
Hi Florin,
in the meantime I've struggled through the logon process and found two
reasons, why the logon couldn't work.
1.	The path to pwauth in the function trypass( ) of class session in
/var/www-naat/html/php/class.php is wrong for
	a standard installation of pwauth.
	The standard rpm installs pwauth in /usr/bin/pwauth and not in
/usr/lib/apache2-extramodules/pwauth or
	/usr/lib/apache/pwauth. So I've corrected the path in class.php.
2.	Pwauth in version pwauth-2.2.8-1mdk.i586.rpm checks the invoking UID
against a hard coded SERVER_UIDS, that is 48 (the
	apache user). My apache installation (apache2-2.0.53-9mdk) uses UID:GUID
74:74, so the pwauth intern test fails and pwauth
	ends without forwarding the logon request to PAM_AUTHENTICATE.
	In Version 2.2.8-1.1.102 of pwauth this test is omitted and so the request
is sent correctly to pam for authentication.

Now I can login to MNF.
By the way, would you expect further problems concerning a mandriva standard
installation and your MNF specific packages?

So building MNF2 from CVS isn't as easy as install a basic system, build the
MNF specific rpms, install this rpms and their dependencies
and have fun with MNF - that was not what I've expected.

Regards

Stephan
message.footer (text/plain, 232 B)
____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________