Received: (qmail 7136 invoked by uid 501); 13 Feb 2001 00:15:57 -0000
Message-Id: <20010213001557.7123.qmail@apache.org>
Date: 13 Feb 2001 00:15:57 -0000
From: ken kanno <apache_bullshit@symmetric.net>
Reply-To: apache_bullshit@symmetric.net
To: submit@bugz.apache.org
Subject: DBM authentication looks for the wrong files
X-Send-Pr-Version: 3.110

>Number:         7234
>Category:       mod_auth-any
>Synopsis:       DBM authentication looks for the wrong files
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    apache
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Mon Feb 12 16:20:03 PST 2001
>Closed-Date:    Tue Feb 13 17:47:03 PST 2001
>Last-Modified:  Tue Feb 13 17:47:03 PST 2001
>Originator:     apache_bullshit@symmetric.net
>Release:        1.3.17
>Organization:
>Environment:
FreeBSD dominion.crow.net 4.2-STABLE FreeBSD 4.2-STABLE #1: Sun Dec 10 15:19:19 CST 2000     root@dominion.crow.net:/var/cvs/src/sys/compile/DOMINION-10  i386
>Description:
mod_auth_dbm tries to be too smart and appends .db to your authdatabase filename.
>How-To-Repeat:
install apache with mod_auth_dbm
>Fix:
DOCUMENT that if you authenticate with AuthDBMUserFile that apache does NOT look for thefile you name but [your file].db
this wasted hours of my time and it. Even better, make apache read the file the user specifies and dont' magically append file suffixes.

>Release-Note:
>Audit-Trail:
State-Changed-From-To: open-closed
State-Changed-By: slive
State-Changed-When: Tue Feb 13 17:47:03 PST 2001
State-Changed-Why:

I am not an expert in this area, but if you look at the
mod_auth_dbm code, you will see that Apache passes the
exact contents of the AuthDBMFile directive to the
dbm_open routines.  It is the dbm libraries on your
system that decide how exactly that maps into a filename.
You can usually find more information about how your
operating system deals with this using "man dbm_open".
In general, there is not a problem because whatever
method you use to create the dbm file (eg dbmmanage)
should use the same dbm_* calls, and therefore map to
filenames in exactly the same way.  Problems do arise
when apache and the dbm creator use conflicting libraries.

Unfortunately, it is necessary to have some knowledge about
how your system handles dbm files in order to make use
of mod_auth_dbm.  Because of the different ways different
systems handle this, it would be impossible to document
all the possibilities.  The documentation could certainly
use improving, so if you have any specific suggestions, 
please feel free to let us know.

Thanks for using Apache!

Release-Changed-From-To: 1.3.17, probably more-1.3.17
Release-Changed-By: slive
Release-Changed-When: Tue Feb 13 17:47:03 PST 2001
>Unformatted:
 [In order for any reply to be added to the PR database, you need]
 [to include <apbugs@Apache.Org> in the Cc line and make sure the]
 [subject line starts with the report component and number, with ]
 [or without any 'Re:' prefixes (such as "general/1098:" or      ]
 ["Re: general/1098:").  If the subject doesn't match this       ]
 [pattern, your message will be misfiled and ignored.  The       ]
 ["apbugs" address is not added to the Cc line of messages from  ]
 [the database automatically because of the potential for mail   ]
 [loops.  If you do not include this Cc, your reply may be ig-   ]
 [nored unless you are responding to an explicit request from a  ]
 [developer.  Reply only with text; DO NOT SEND ATTACHMENTS!     ]