[pubcookie-users] Re: configuration error: couldn't check access. No groups file?

[Sacha Michel Mallais]

On Mar 30, 2007, at 12:23 PM, Sacha Michel Mallais wrote:

> I think I've got my keyclient problem solved, but now I'm having a  
> problem with the redirection that occurs after logging in via  
> PubCookie.  If I set up the "testapp" directory as in the  
> installation instructions, then navigate there with my browser, I  
> get an error 500 Internal Server Error after logging in on the  
> PubCookie login page.  I see this message in the error log  
> (complete debug-level log appended to the end of this message):
>
> [Fri Mar 30 12:10:15 2007] [crit] [client 192.168.9.12]  
> configuration error:  couldn't check access.  No groups file?: / 
> testapp/
>
> From what I've read on the various lists, it appears that  
> mod_auth_apple.so is causing the problem, but I've not seen any  
> solutions that work.  I've tried removing mod_auth_apple, tried  
> replacing it with mod_auth or mod_auth_dbm, tried moving the  
> mod_pubcookie AddModule/LoadModule declarations to above the ones  
> for mod_auth_apple, all to no avail.  I also tried setting  
> AllowOverride All and AuthAuthoritative off in my Directory  
> directive, but they didn't work either.

More info on this problem:  this blog post (http://ammonlauritzen.com/ 
blog/2006/11/20/no-groups-file/) indicates that that log message does  
not indicate a problem with the configuration, but is instead a fall- 
through message.  When Apache cannot find any module that  
authenticates the user, it falls through to print this (apparently  
misleading) message.

Does anyone have any ideas why the PubCookie module would not be  
authenticating?  If you take a look at the log messages, you'll see  
Apache failing on 3 different modules (none of them PubCookie) before  
printing that error message (i.e. giving up):

[Mon Apr  2 10:42:43 2007] [debug] mod_spnego_apple.c(499): [client  
192.168.9.12] mod_spnego_apple: Declining non-negotiate auth_type
[Mon Apr  2 10:42:43 2007] [debug] mod_digest_apple.c(588): [client  
192.168.9.12] mod_digest_apple: Declining non-digest auth_type
[Mon Apr  2 10:42:43 2007] [debug] mod_auth_apple.c(376): [client  
192.168.9.12] mod_auth_apple: Declining non-basic auth_type
[Mon Apr  2 10:42:43 2007] [crit] [client 192.168.9.12] configuration  
error:  couldn't check access.  No groups file?: /testapp/

Anyone have any ideas?  I'm at my wit's end and am about to start  
sacrificing chickens to the Apache gods...


sacha


-- 
Sacha Michel Mallais             400 kg chimp
Global Village Consulting Inc.   http://www.global-village.net/
PGP Key ID: 7D757B65             AIM: smallais
"Choke on that, causality!"  -- the Professor, "Futurama"