Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can mod_auth_radius work together with authnz_ldap_module in apache 2.4 #48

Open
Philippe34 opened this issue Feb 5, 2024 · 2 comments

Comments

@Philippe34
Copy link

Philippe34 commented Feb 5, 2024

Hi,

I use on a deprecated machine with apache 2.2 the radius_auth_module and authz_ldap_module authentication modules and it works well together.
I had compiled mod_auth_radius-1.5.8 and I use mod_authz_ldap-0.26-16

My conf looks like:

<AuthnProviderAlias ldap myldap>
    AuthLDAPBindDN ...
    AuthLDAPBindPassword ...
    AuthLDAPURL ...
</AuthnProviderAlias>

<IfModule mod_auth_radius-2.0.c>
AddRadiusAuth ...
AddRadiusCookieValid 5
</IfModule>

<Directory /var/www/html/private>
AuthType Basic
AuthBasicProvider myldap radius
AuthRadiusAuthoritative on
Require valid-user
</Directory>

Now after having upgraded the private application on a new machine with apache 2.4, I try to do the same thing.
If I only use mod_authnz_ldap, the authentication works as expected.
I have compiled and installed mod_auth_radius-1.6.0, but when this module is loaded, the authnz_ldap_module does not work again.
If mod_auth_radius is loaded before authnz_ldap_module, and if I want to authenticate with LDAP, I get an 401 Unauthorized page
If mod_auth_radius is loaded after authnz_ldap_module, and whatever the identifiant, the authentication is a success.
I don't know if radius works at this step, since it must be tested by an another person, but I can conclude that mod_auth_radius is not compatible with authnz_ldap_module.

It also seems that mod_auth_radius is no longer maintained.
Could this ever be fixed or is it worth less if I abandon radius for apache and just keep ldap?

Thank you for your opinion.

Regards

@Philippe34 Philippe34 changed the title Can mod_auth-radius work together with authnz_ldap_module in apache 2.4 Can mod_auth_radius work together with authnz_ldap_module in apache 2.4 Feb 5, 2024
@alandekok
Copy link
Member

Unfortunately the module hasn't been updated in a very long time.

But there's no reason I'm aware of why it wouldn't work with another authentication module.

That being said, I don't know much about Apache's internals. I haven't worked with Apache for a very long time. When I did, the debugging output was extremely unhelpful.

So if the module works, great. If not, I don't have the skills or time to look into it. I would suggest just moving to LDAP.

@Philippe34
Copy link
Author

@alandekok
I thank you for your feedback.
It also doesn't seem to me that there is the development of a recent radius module anywhere. I will see about using ldap.
Have a nice day

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants