From owner-freebsd-hackers  Fri Jun 23  1:59:28 2000
Delivered-To: freebsd-hackers@freebsd.org
Received: from huron.dnepr.net.ua (huron.dnepr.net.ua [195.248.180.242])
	by hub.freebsd.org (Postfix) with ESMTP
	id 4C56637B607; Fri, 23 Jun 2000 01:59:15 -0700 (PDT)
	(envelope-from white@onyx.extra.dp.ua)
Received: from onyx.extra.dp.ua (mttye.dnepr.net.ua [195.248.180.80])
	by huron.dnepr.net.ua (8.10.1/8.10.1g/) with ESMTP id e5N90op39981;
	Fri, 23 Jun 2000 12:00:54 +0300 (EEST)
Received: (from white@localhost)
	by onyx.extra.dp.ua (8.10.0/8.10.0/Who.Cares) id e5N8viX05644;
	Fri, 23 Jun 2000 11:57:44 +0300 (EET DST)
Date: Fri, 23 Jun 2000 11:57:43 +0300
From: Alexander Prohorenko <white@extra.dp.ua>
To: freebsd-hackers@freebsd.org, freebsd-questions@freebsd.org
Cc: ingo@blank.pages.de
Subject: Apache with PAM/RADIUS authentication
Message-ID: <20000623115743.A5030@extra.dp.ua>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2i
Organization: Extra Solutions
X-Operating-System: SunOS 5.7 i86pc 
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Hello guys,

I hope to get some help here.  I've got in troubles trying to run
Apache PAM authentication module on FreeBSD.

white@nwlynx:/var/home/white>uname -a
FreeBSD nwlynx.xxx.com 3.4-STABLE FreeBSD 3.4-STABLE #11: Tue May 16 10:43:05 MDT 2000     white@nwlynx.xxx.com:/usr/src/sys/compile/NWLYNX  i386

/etc/pam.conf has:

httpd   auth    required        pam_radius.so   try_first_pass
httpd   account required        pam_unix.so

I'm running RADIUS server on localhost. 

/etc/radius.conf has:

auth	localhost	thatsakey

I've used PAM module from http://blank.pages.de/pam/ - mod_auth_pam.c
and added it as DSO module using apxs.

/usr/local/apache/conf/httpd.conf has:

LoadModule pam_auth_module    libexec/mod_auth_pam.so
AddModule mod_auth_pam.c

...

<Directory /root>
	Options FollowSymLinks
	AllowOverride None
	AuthPAM_Enabled on
	AuthName    "Security forever!"
	AuthType    Basic
	require     valid-user
</Directory>

But when Apache tries to authorize I'm getting in /var/log/messages:

Jun 22 13:50:15 nwlynx dev-httpd: unable to dlopen(/usr/lib/pam_radius.so)
Jun 22 13:50:15 nwlynx dev-httpd: [dlerror: /usr/lib/pam_radius.so: Undefined symbol "pam_get_item"]
Jun 22 13:50:15 nwlynx dev-httpd: adding faulty module: /usr/lib/pam_radius.so
Jun 22 13:50:15 nwlynx dev-httpd: unable to dlopen(/usr/lib/pam_unix.so)
Jun 22 13:50:15 nwlynx dev-httpd: [dlerror: /usr/lib/pam_unix.so: Undefined symbol "pam_get_item"]
Jun 22 13:50:15 nwlynx dev-httpd: adding faulty module: /usr/lib/pam_unix.so

It goes without saying that no RADIUS requests is being sent and authorisation
generates a failure message.

How can I solve this problem??  Thank you so much for your input,

-- 
Alexander Prohorenko, Extra Solutions [ http://extra.com.ua ]

  "Those who do not understand UNIX are condemned to reinvent it, poorly."
							-- H. Spencer


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message