[ale] Apache2 & mod_auth_pam

[Scott Warfield]

Hey guys & gals,

I'm looking to get Apache to authenticate versus a Windows Domain
Controller. After much investigation, I've found a few options.
mod_auth_smb, SMBAuth, and mod_auth_pam with pam-smb. However, there's
issues with all of them.

The most logical choice would be to have apache auth directly with the DC,
hense mod_auth_smb first. http://freshmeat.net/projects/mod_auth_smb/, but
the project no longer exists there and seems to be no longer maintained at
all.

SMBAuth from tekrat requires the samba-3.0.0 sourse tree exclusively.
Compilation runs fine, however, apache complains about an unreferenced
symbol to yp_get_domain when loading the module.

The other option would be to use mod_auth_pam to authenticate vs PAM-smb,
http://pam.sourceforge.net/mod_auth_pam/ for Apache2. To my surprise, simply
building the module with apxs results in an unreferenced symbol to pam_end()
and others when Apache loads it. I'm sure this is a library issue.

I saw a reference to building the module with pam lib statically linked
using "apxs -a -i -c -lpam -o mod_auth_pam.so mod_auth_pam.c", but this
throws a number of errors at compile, one of which is
/usr/lib/gcc/i386-redhat-linux/3.4.3/../../../crt1.o(.text+0x18): In
function `_start':
: undefined reference to `main'.

Another reference i noticed is this particular error might be a result of a
bug in libtool, but no disposition was posted.
(http://www.redhatconfig.com/msg/3875.html) from 2003... blah


So, I guess I'm looking for a few things; Anyone know of other options
better geared to FC and Apache2? Or, does anyone have experience with the
issues above for the apache modules?

I'm running an updated FC3 server.

Thanks!

-- Scott

-------------------------------------------------------
Scott Warfield
Internet Security Systems
X-Force Developer

swarfield at iss.net
PGP Key: 0x70AB7F3D
-------------------------------------------------------