Re: Circular Login / Redirect

So it appears as if the real problem is with "MembersOnly=1" when used with
LDAP.

If you look at the original log I submitted, it was showing:
[2005-10-31 15:32:09] User [email protected] renewed in class Public

It would appear as if it is placing authenticated users in the "Public"
class, which are not allowed in MembersOnly=1 and TrustedGroups = "Any".

This seems to be verified by:
http://lists.nocat.net/pipermail/nocat/2004-May/004952.html

However, that was over a year ago, and I would have thought the patches
might have been submitted. How have others dealt with this? Hiding the
"Skip" button seems more like "security through obscurity" than a truly safe
method.

Thanks,
Dave

On 11/1/05, Big Wave Dave <[email protected]> wrote:
>
> I actually did see that error, but checked the permissions and they seemed
> fine:
> [root@pegasus gateway]# ls -al | grep pgp
> drwx------ 2 apache apache 4096 Oct 31 16:14 pgp
> [root@pegasus gateway]#cat /etc/passwd | grep apache
> apache:x:48:48:Apache:/var/www:/sbin/nologin
> [root@pegasus gateway]# cat /etc/httpd/conf/httpd.conf | grep User
> # User/Group: The name (or #number) of the user/group to run httpd as.
> # . On SCO (ODT 3) use "User nouser" and "Group nogroup".
> User apache
> [root@pegasus gateway]#
>
> FYI... This is Fedora Core 4 and I am running the
> http://nocat.net/downloads/NoCatAuth/NoCatAuth-nightly.tgz
>
> Any other thoughts?
> Thanks,
> Dave
>
> On 10/31/05, Sanket Desai <[email protected]> wrote:
> >
> > If you have looked at the error carefully, it says that ownership is not
> > proper.
> > Actullay, owner of the directory pgp in /usr/local/nocat (or if any
> > other
> > location where you have installed nocat), should be of webserver. If you
> >
> > have installed apache then owner of pgp directory and all its files
> > should
> > be user "apache".
> > That will solve the error.
> > Please make me correct if I am wrong.
> > regards,
> > Sanket.
> >
> > On 11/1/05, Zac Morris < [email protected]> wrote:
> > >
> > > I had this happen as well.
> > >
> > > For me it had to do with the way that the OS was originally configured
> > > (I used the Stompbox image which is ReadOnly by default, and they had
> > > they had an older version of authcat installed and had their
> > trusted.pgp
> > > file in the RO directories).
> > >
> > > If you're using Pebble or one of the "default ReadOnly" distributions,
> > > try to cd /ro/usr/local/nocat and if there's a gpg directory there,
> > > delete it.
> > >
> > > Then re-copy your trusted.pgp from your authserver to
> > /usr/local/nocat/gpg
> > >
> > > then reboot and try it.
> > >
> > > Big Wave Dave wrote:
> > >
> > > >All,
> > > >
> > > >I had this all working on Friday, powered it off for the weekend, and
> > now
> > > it
> > > >doesn't work. I clearly tweaked a config somewhere before shutting it
> > > down.
> > > >Symptoms...
> > > >I get the login prompt... enter login information... get successful
> > > message
> > > >and says it will redirect me to the original destination... but
> > redirects
> > > me
> > > >back to the login!? It appears as if it likes the login/auth, but
> > just
> > > keeps
> > > >recapturing me. The http://host:5280/status shows the machine/user as
> > > logged
> > > >in, making it more confusing.
> > > >
> > > >Any help would be appreciated!
> > > >Thanks,
> > > >Dave
> > > >
> > > >Log messages...
> > > >[2005-10-31 15:28:47] Spawning child process 3692.
> > > >[2005-10-31 15:28:47] Capturing 192.168.202.254
> > <http://192.168.202.254> <http://192.168.202.254><
> > > http://192.168.202.254> for
> > > >
> > >
> > http://start.mozilla.org/firefox?client=firefox-a&rls=org.mozilla:en-US:official
> > > >[2005-10-31 15:28:47] Notifying parent of Capture on peer
> > > 00:0E:XX:XX:XX:1E
> > > >[2005-10-31 15:28:47] Got notification Capture of peer
> > 00:0E:XX:XX:XX:1E
> > > >[2005-10-31 15:28:47] Child process returned 1
> > > >[2005-10-31 15:29:24] Connection to 192.168.202.1<http://192.168.202.1><
> > http://192.168.202.1><
> > > http://192.168.202.1>from
> > > >192.168.202.254 <http://192.168.202.254> <http://192.168.202.254> <http://192.168.202.254
> > >
> > > >[2005-10-31 15:29:24] Capturing 192.168.202.254<http://192.168.202.254><
> > http://192.168.202.254><
> > > http://192.168.202.254> for
> > > >http://fxfeeds.mozilla.org/rss20.xml
> > > >[2005-10-31 15:29:24] Spawning child process 3693.
> > > >[2005-10-31 15:29:24] Notifying parent of Capture on peer
> > > 00:0E:XX:XX:XX:1E
> > > >[2005-10-31 15:29:24] Got notification Capture of peer
> > 00:0E:XX:XX:XX:1E
> > > >[2005-10-31 15:29:24] Child process returned 1
> > > >[2005-10-31 15:32:09] Connection to 192.168.202.1<http://192.168.202.1><
> > http://192.168.202.1><
> > > http://192.168.202.1>from
> > > >192.168.202.254 <http://192.168.202.254> <http://192.168.202.254> <
> > http://192.168.202.254>
> > > >[2005-10-31 15:32:09] Received notify from
> > > > 192.168.202.254 <http://192.168.202.254> <http://192.168.202.254><
> > http://192.168.202.254>
> > > >[2005-10-31 15:32:09] Spawning child process 3699.
> > > >[2005-10-31 15:32:09] gpg --decrypt
> > > >--homedir=/usr/local/nocat/gateway/bin/../pgp --keyring
> > > >trustedkeys.gpg--no-tty -o- returned error message:
> > > >gpg: WARNING: unsafe ownership on homedir
> > > >"/usr/local/nocat/gateway/bin/../pgp"
> > > >gpg: Signature made Mon Oct 31 15:32:04 2005 PST using RSA key ID
> > > DXXXXXX3
> > > >gpg: Good signature from "Wireless Team < [email protected]>"
> > > >[2005-10-31 15:32:09] Got auth msg:
> > > >Redirect
> > > >
> > >
> > http://start.mozilla.org/firefox?client=firefox-a&rls=org.mozilla:en-US:official
> > > >Mac 00:0E:XX:XX:XX:1E
> > > >Action Permit
> > > >User [email protected]
> > > >Mode login
> > > >Timeout 86400
> > > >Token $1$Ytynw241$Ry7AaP15eNojKJ8C.QBOI/
> > > >[2005-10-31 15:32:09] User () v. trusted (Any)
> > > >[2005-10-31 15:32:09] User [email protected] renewed in class
> > > Public
> > > >[2005-10-31 15:32:09] Notifying parent of Renew on peer
> > 00:0E:XX:XX:XX:1E
> > > >[2005-10-31 15:32:09] Available MACs: 00:0E:XX:XX:XX:1E
> > > >[2005-10-31 15:32:09] Got notification Renew of peer
> > 00:0E:XX:XX:XX:1E
> > > >[2005-10-31 15:32:09] Child process returned 1
> > > >[2005-10-31 15:32:09] Spawning child process 3701.
> > > >[2005-10-31 15:32:09] Connection to 192.168.202.1<http://192.168.202.1><
> > http://192.168.202.1><
> > > http://192.168.202.1>from
> > > >192.168.202.254 <http://192.168.202.254> < http://192.168.202.254> <
> > http://192.168.202.254>
> > > >[2005-10-31 15:32:09] Capturing 192.168.202.254<http://192.168.202.254><http://192.168.202.254
> > ><
> > > http://192.168.202.254> for
> > > >
> > >
> > http://start.mozilla.org/firefox?client=firefox-a&rls=org.mozilla:en-US:official
> > > >[2005-10-31 15:32:09] Notifying parent of Capture on peer
> > > 00:0E:XX:XX:XX:1E
> > > >[2005-10-31 15:32:09] Got notification Capture of peer
> > 00:0E:XX:XX:XX:1E
> > > >[2005-10-31 15:32:09] Child process returned 1
> > > >_______________________________________________
> > > >NoCat mailing list
> > > >[email protected]
> > > >http://lists.nocat.net/mailman/listinfo/nocat
> > > >
> > > >
> > > _______________________________________________
> > > NoCat mailing list
> > > [email protected]
> > > http://lists.nocat.net/mailman/listinfo/nocat
> > >
> > _______________________________________________
> > NoCat mailing list
> > [email protected]
> > http://lists.nocat.net/mailman/listinfo/nocat
> >
>
>
>
> --
>
> ----------------------------------------------------------
> Are Your Friends Lemmings?
> -- http://www.lemmingshirts.com




--

----------------------------------------------------------
Are Your Friends Lemmings?
-- http://www.lemmingshirts.com