Two questions about ttaauthd, starttad.sh
1) We need to use Tarantella's (and not Apache's "basic") authentication
to control access to a particular web application. I copied the
mod_readcookie.so file to the appropriate shared object library, added the
LoadModule and AddModule directives, and created the
<Directory>...</Directory> stanza in the Apache httpd.conf file. I added
a single user name, joe, to the "users" file that the AuthUserFile
directive points to:
<Directory "/var/myapp/cgi-bin">
AuthName"MyApp"
AuthTypeBasic
AuthExternalPort5050
AuthUserFile/var/myapp/dat/users
AuthCookieOverride On
require valid-user
order deny,allow
</Directory>
I know that the mod_readcookie.so module is loaded because Apache gripes
about it not having been compiled with EAPI.
When joe first attempts to access the "myapp" application in cgi-bin, the
Basic Authentication challenge dialog pops up. When "joe" types his user
name and clicks "OK", he is immediately logged in -- with no password! In
fact, "joe" isn't even a valid user in ENS, UNIX, or LDAP. We purposely
set it up this way to rule out the possibility that the password was
cached.
Looking further, I discovered that the ttaauthd wasn't running, so I
manually started it after figuring out that it needs the ASAD port 5427 as
the first argument.
With ttaauthd running, there is no difference in behavior. I've tried to
sniff the stream socket /tmp/.ttauthd can see zero traffic between the
Apache mod_cookie_ext module and ttaauthd.
What else should I be checking?
2) I've grep'd the entire Tarantella 3 tree and didn't find a single
instance where /opt/tarantella/bin/scripts/starttad.sh is invoked. How
and under what circumstances is it invoked -- is there an array manager
setting that I've missed that will cause it to start up automatically?
Thanks!
[2047 byte] By [
BobFontana] at [2007-11-25 20:49:44]
# 1
Bob Fontana wrote:
> 1) We need to use Tarantella's (and not Apache's "basic") authentication
> to control access to a particular web application. I copied the
> mod_readcookie.so file to the appropriate shared object library, added the
> LoadModule and AddModule directives, and created the
> <Directory>...</Directory> stanza in the Apache httpd.conf file. I added
> a single user name, joe, to the "users" file that the AuthUserFile
> directive points to:
>
> <Directory "/var/myapp/cgi-bin">
>AuthName"MyApp"
>AuthTypeBasic
>AuthExternalPort5050
>AuthUserFile/var/myapp/dat/users
>AuthCookieOverride On
>require valid-user
>order deny,allow
> </Directory>
>
> I know that the mod_readcookie.so module is loaded because Apache gripes
> about it not having been compiled with EAPI.
>
> When joe first attempts to access the "myapp" application in cgi-bin, the
> Basic Authentication challenge dialog pops up. When "joe" types his user
> name and clicks "OK", he is immediately logged in -- with no password! In
> fact, "joe" isn't even a valid user in ENS, UNIX, or LDAP. We purposely
> set it up this way to rule out the possibility that the password was
> cached.
>
> Looking further, I discovered that the ttaauthd wasn't running, so I
> manually started it after figuring out that it needs the ASAD port 5427 as
> the first argument.
>
> With ttaauthd running, there is no difference in behavior. I've tried to
> sniff the stream socket /tmp/.ttauthd can see zero traffic between the
> Apache mod_cookie_ext module and ttaauthd.
>
> What else should I be checking?
>
> 2) I've grep'd the entire Tarantella 3 tree and didn't find a single
> instance where /opt/tarantella/bin/scripts/starttad.sh is invoked. How
> and under what circumstances is it invoked -- is there an array manager
> setting that I've missed that will cause it to start up automatically?
>
> Thanks!
>
maybe need you change the apache server of tarantella to the new apache
for example for me i need php the web server of tarantella doesn't
include it i need to compile the apache version 2.0.53 the lastest and
include the php works great maybe you need to do the same for module works
# 2
Thanks. However mod_readcookie.so doesn't work with Apache 2.0. After
all, 2.0 has only been out for 5 years so there hasn't been nearly enough
time to get the product updated with 1999-2000 technology. After looking
under the covers of Tarantella, it's really no surprise.
Incidentally, after we installed Citrix, we found this workaround:
mv /opt/tarantella Recycle%20Bin
Mario Alberto Gamboa Pang wrote:
> Bob Fontana wrote:
> > 1) We need to use Tarantella's (and not Apache's "basic") authentication
> > to control access to a particular web application. I copied the
> > mod_readcookie.so file to the appropriate shared object library, added the
> > LoadModule and AddModule directives, and created the
> > <Directory>...</Directory> stanza in the Apache httpd.conf file. I added
> > a single user name, joe, to the "users" file that the AuthUserFile
> > directive points to:
> >
> > <Directory "/var/myapp/cgi-bin">
> >AuthName"MyApp"
> >AuthTypeBasic
> >AuthExternalPort5050
> >AuthUserFile/var/myapp/dat/users
> >AuthCookieOverride On
> >require valid-user
> >order deny,allow
> > </Directory>
> >
> > I know that the mod_readcookie.so module is loaded because Apache gripes
> > about it not having been compiled with EAPI.
> >
> > When joe first attempts to access the "myapp" application in cgi-bin, the
> > Basic Authentication challenge dialog pops up. When "joe" types his user
> > name and clicks "OK", he is immediately logged in -- with no password! In
> > fact, "joe" isn't even a valid user in ENS, UNIX, or LDAP. We purposely
> > set it up this way to rule out the possibility that the password was
> > cached.
> >
> > Looking further, I discovered that the ttaauthd wasn't running, so I
> > manually started it after figuring out that it needs the ASAD port 5427 as
> > the first argument.
> >
> > With ttaauthd running, there is no difference in behavior. I've tried to
> > sniff the stream socket /tmp/.ttauthd can see zero traffic between the
> > Apache mod_cookie_ext module and ttaauthd.
> >
> > What else should I be checking?
> >
> > 2) I've grep'd the entire Tarantella 3 tree and didn't find a single
> > instance where /opt/tarantella/bin/scripts/starttad.sh is invoked. How
> > and under what circumstances is it invoked -- is there an array manager
> > setting that I've missed that will cause it to start up automatically?
> >
> > Thanks!
> >
> maybe need you change the apache server of tarantella to the new apache
> for example for me i need php the web server of tarantella doesn't
> include it i need to compile the apache version 2.0.53 the lastest and
> include the php works great maybe you need to do the same for module works
