[pubcookie-users] Re: configuration error: couldn't check access. No groups file?

[Sacha Michel Mallais]

On Apr 2, 2007, at 1:35 PM, Jim Fox wrote:

>> [Mon Apr  2 12:23:39 2007] [debug] mod_pubcookie.c(1752): [client  
>> 192.168.9.12]  .. user_hook exit: user 't-9sacha', type 'CNetID'
>> [Mon Apr  2 12:23:39 2007] [debug] mod_spnego_apple.c(499):  
>> [client 192.168.9.12] mod_spnego_apple: Declining non-negotiate  
>> auth_type
>> [Mon Apr  2 12:23:39 2007] [debug] mod_digest_apple.c(588):  
>> [client 192.168.9.12] mod_digest_apple: Declining non-digest  
>> auth_type
>> [Mon Apr  2 12:23:39 2007] [debug] mod_auth_apple.c(376): [client  
>> 192.168.9.12] mod_auth_apple: Declining non-basic auth_type
>> [Mon Apr  2 12:23:39 2007] [crit] [client 192.168.9.12]  
>> configuration error: couldn't check access.  No groups file?: / 
>> testapp/
>
> Pubcookie's last line indicates it authenticated you.
> However, pubcookie doesn't do the authz part.  It leaves
> that for another of the auth modules, usually mod_auth.
>
> It seems none of your mod_auth_xxx are willing to help.
> Can you put the default mod_auth in there somewhere?

I swear I tried that, but maybe the order was wrong... in any case,  
that appears to have worked!

For posterity:
I simply added mod_auth after mod_auth_apple:

LoadModule apple_auth_module      libexec/httpd/mod_auth_apple.so
LoadModule auth_module      libexec/httpd/mod_auth.so

and

AddModule mod_auth_apple.c
AddModule mod_auth.c


Thanks again Jim,


sacha


-- 
Sacha Michel Mallais             Software Poet
Global Village Consulting Inc.   http://www.global-village.net/
PGP Key ID: 7D757B65             AIM: smallais
There are three types of people in this world:
those that can count, and those that can't