Apache::AuthTkt Perl module installed in usable path

Bug #1994944 reported by Smylers
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
libapache2-mod-auth-tkt (Ubuntu)
New
Undecided
Unassigned

Bug Description

This package comes with the Apache::AuthTkt Perl library for generating the cookies used by the Apache module. But it's currently installed in the doc/examples/ subdirectory as a mere example, not in a place where users can use it directly.

In the upstream source Apache/AuthTkt.pm is in the cgi/ subdirectory: https://github.com/gavincarr/mod_auth_tkt/tree/master/cgi

The other files in that subdirectory are indeed examples and are appropriately installed into /usr/share/doc/libapache2-mod-auth-tkt/examples/cgi/

But Apache::AuthTkt is the actual library that user programs should use. It's also published separately on CPAN: https://metacpan.org/pod/Apache::AuthTkt

To be usable it needs to be installed under /usr/share/perl5/ or /usr/share/perl/, so perl finds it.

As it is, users wanting to use this Perl module have several suboptimal options:

* Start their Perl program with use lib '/usr/share/doc/libapache2-mod-auth-tkt/examples/cgi'; — undesirable to be relying on a doc directory, which somebody could remove or alter, not realizing it's running live code, and also because it weirdly puts the actual example files in that directory into perl's @PATH.

* Create a symlink into a directory that is already in perl's @PATH, such as /usr/local/lib/site_perl/ containing Apache as a link to usr/share/doc/libapache2-mod-auth-tkt/examples/cgi/Apache/ — but that's still relying on running live code from a mere doc directory (and it requires root access to set up the symlink).

* Install Apache::AuthTkt separately directly from CPAN — meaning the module is wastefully installed twice on the server, and the sys-admin has to manage the module separately, outside of the Debian packaging system.

Please can you move Apache/AuthTkt.pm to be installed in the usual place for .deb-provided Perl modules. Thank you.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.