missing unixgroup script

[chrizz]

Binary package hint: pwauth

package pwauth
Ubuntu 9.10

in combination with libapache2-mod-authnz-external pwauth is missing the unixgroup perl script.

is this wanted? maybe because the availability of libapache2-mod-authz-unixgroup but who knows.

i still think the script should be included in the packet because group auth wont work without it in the mod_authnz_external.

thx

[Jan Kopp (h-kopp)]

You can grab it from pwauth project site (http://code.google.com/p/pwauth/).

copy unixgroup to /usr/sbin and make it executable.

[ArbitraryConstant (anthony-spamtrap)]

really annoying that this the package isn't functional without me going and grabbing the missing pieces from some random google code page

[Landon Thomas (lthomas)]

In the unixgroup script itself, it says: "This is a group authenticator for use with mod_auth_external using the 'environment' argument passing method. If you are using mod_authnz_external, then a much better choice is to use mod_authz_unixgroup for group checking."

After installing libapache2-mod-authz-unixgroup and enabling the module, I was able to get group authentication to work by adding these configs:

AuthExternal pwauth
AuthBasicProvider external
AuthzUnixgroup on
AuthName "Site Name"
AuthType "basic"
require group mygroup

based on these docs: http://code.google.com/p/mod-auth-external/wiki/ModAuthzUnixGroup

Note, you still need to point to pwauth in the <VirtualHost> config outside of any <Directory> context:

DefineExternalAuth pwauth pipe /usr/sbin/pwauth

See: http://code.google.com/p/mod-auth-external/wiki/ConfigApache22

I'm not making any judgment on whether unixgroup should be included or not, but for other folks like me that stumble upon this bug, you may want to try libapache2-mod-authz-unixgroup before manually adding unixgroup.