[Dapper][Apache2] mod_auth_digest segfaults if user not in required group

[Carsten Menke]

Binary package hint: apache2

Apache segfaults if a user is not in a required group (it works if you use AuthType Basic)

So here is my setup

Directory which is protected

/var/www/download

.htaccess
Options +Indexes

AuthType Digest
AuthName "Download Bereich"
AuthDigestFile /etc/apache2/htdigest
AuthDigestGroupFile /etc/apache2/htgroups
AuthDigestDomain /download/
Require valid-user # Also fiddled around with Require group download, same result

Directory which contains additional access level

/var/www/download/test

.htaccess
Require group test

As soon if a user is not in the group "test" apache segfaults and you just get a white blank screen if you accessing the parent directory with the browser (/var/www/download)

-rw-r--r-- 1 www-data root 50 2007-09-27 05:18 /etc/apache2/htgroups
download: testuser
test: anotheruser

When I use the same files just with AuthType Basic, it works like expected, it also works if the the user *IS* in the group which is required

NOTE:
As the Version used in Dapper has no debugging symbols, nor is a -dbg version available I cannot provide a backtrace

[Mathias Gug (mathiaz)]

Thank you for taking the time to report this bug and helping to make Ubuntu better.

Thanks for posting a detailed test case. Could you specify how to create/generate the htdigest file ?

[Carsten Menke (carsten-menke)]

The contents of the htgroups file looks like this:

htgroups
download: user1 user2 user3

htdigest file is generated by:

htdigest2 -c /etc/apache2/htdigest "Download Bereich" user1