apache dbi | apache schmiert ab

[lufthansen]

hi,
also ich habe jemand der nutzt die dbi um user über htaccess gegen eine db zu authen ...
das hat bis jetzt immer ganz gut geklappt nur (vermute ich) gab es ja vor ein paar tagen ein security update in dem paket und ich glaue das es seid dem nicht mehr geht, in den logs steht das der apache abschmiert also seine childs....
dann habe ich ein bißchen gegoogelt und folgendes gefunden ...
http://www.die.net/doc/linux/man/man3/a ... dbi.3.html

To enable debugging the variable $Apache::AuthDBI::DEBUG must be set. This can either be done in startup.pl or in the user script. Setting the variable to 1, just reports about a cache miss. Setting the variable to 2 enables full debug output.

ich habe dann die htaccess so weit abgeändert um das debugging zu aktiveren habe jetzt jedoch das gefühl als wenn ich das falsch verstanden hätte hat da vllt noch jemand eine idee ?

cat .htaccess
AuthName "Administration des Internetauftritts des Musikvereins 'Amicitia 1796' Garbeck e.V. Zutritt nur für den Webmaster"
AuthType Basic

PerlAuthenHandler Apache::AuthDBI::authen
PerlAuthzHandler Apache::AuthDBI::authz

PerlSetVar Apache::AuthDBI::DEBUG 2
PerlSetVar Auth_DBI_encrypted on
PerlSetVar Auth_DBI_data_source dbi:mysql:usr_web29_1
PerlSetVar Auth_DBI_username web29
PerlSetVar Auth_DBI_password XXX
PerlSetVar Auth_DBI_pwd_table _access
PerlSetVar Auth_DBI_uid_field benutzername
PerlSetVar Auth_DBI_pwd_field passwort
PerlSetVar Auth_DBI_grp_field gruppe

require valid-user

ach ja ist alles woody bis auch php aus dotdeb und grsec 2.4.29

vielen dank für eure mühe :D

[lufthansen]

*schnüff* ich will doch keine lösung des problems nur von jemand der perl kann nen anstoß wie ich das debugging an machen *zu_hülf* :-D

[lufthansen]

also habe das debugging jetzt doch angekriegt aber ich stehe immer noch vorm berg :/

Code: Select all

==========
16673 Apache::AuthDBI::authen request type = ><
==========
16673 Apache::AuthDBI::authz  request type = ><
==========
16673 Apache::AuthDBI::authen request type = >initial main<
REQUEST:
GET / HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/msword, */*
Accept-Encoding: gzip, deflate
Accept-Language: de
Connection: Keep-Alive
Host: admin.mv-garbeck.de
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)

HTTP/1.1 (null)

16673 Apache::AuthDBI::authen get_basic_auth_pw: res = >401<, password sent = ><
==========
16673 Apache::AuthDBI::authen request type = >main<
==========
16673 Apache::AuthDBI::authz  request type = >main<
==========
16673 Apache::AuthDBI::authen request type = ><
==========
16673 Apache::AuthDBI::authz  request type = ><
==========
16673 Apache::AuthDBI::authen request type = >initial main<
REQUEST:
GET / HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/msword, */*
Accept-Encoding: gzip, deflate
Accept-Language: de
Authorization: Basic Q2hyaXN0aWFuOmjkbnNjaGVu
Connection: Keep-Alive
Host: admin.mv-garbeck.de
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)

HTTP/1.1 (null)

16673 Apache::AuthDBI::authen get_basic_auth_pw: res = >0<, password sent = >hänschen<
16673 Apache::AuthDBI::authen user sent = >Christian<
16673 Apache::AuthDBI::authen Config{ placeholder      } = off
16673 Apache::AuthDBI::authen Config{ nopasswd         } = off
16673 Apache::AuthDBI::authen Config{ grp_table        } =
16673 Apache::AuthDBI::authen Config{ uidcasesensitive } = on
16673 Apache::AuthDBI::authen Config{ encrypted        } = off
16673 Apache::AuthDBI::authen Config{ grp_field        } = gruppe
16673 Apache::AuthDBI::authen Config{ uid_field        } = benutzername
16673 Apache::AuthDBI::authen Config{ password         } = XXX
16673 Apache::AuthDBI::authen Config{ pwdcasesensitive } = on
16673 Apache::AuthDBI::authen Config{ pwd_table        } = _access
16673 Apache::AuthDBI::authen Config{ pwd_field        } = passwort
16673 Apache::AuthDBI::authen Config{ log_field        } =
16673 Apache::AuthDBI::authen Config{ username         } = web29
16673 Apache::AuthDBI::authen Config{ encryption_salt  } = password
16673 Apache::AuthDBI::authen Config{ authoritative    } = on
16673 Apache::AuthDBI::authen Config{ log_string       } =
16673 Apache::AuthDBI::authen Config{ grp_whereclause  } =
16673 Apache::AuthDBI::authen Config{ data_source      } = dbi:mysql:usr_web29_1
16673 Apache::AuthDBI::authen Config{ pwd_whereclause  } =
16673 Apache::AuthDBI::authen passwd not found in cache
==========
11294 Apache::AuthDBI::authen request type = ><
==========
11294 Apache::AuthDBI::authz  request type = ><
==========
11294 Apache::AuthDBI::authen request type = >initial main<
REQUEST:
GET / HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/msword, */*
Accept-Encoding: gzip, deflate
Accept-Language: de
Authorization: Basic Q2hyaXN0aWFuOmjkbnNjaGVu
Connection: Keep-Alive
Host: admin.mv-garbeck.de
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)

HTTP/1.1 (null)

11294 Apache::AuthDBI::authen get_basic_auth_pw: res = >0<, password sent = >hänschen<
11294 Apache::AuthDBI::authen user sent = >Christian<
11294 Apache::AuthDBI::authen Config{ placeholder      } = off
11294 Apache::AuthDBI::authen Config{ nopasswd         } = off
11294 Apache::AuthDBI::authen Config{ grp_table        } =
11294 Apache::AuthDBI::authen Config{ uidcasesensitive } = on
11294 Apache::AuthDBI::authen Config{ encrypted        } = off
11294 Apache::AuthDBI::authen Config{ grp_field        } = gruppe
11294 Apache::AuthDBI::authen Config{ uid_field        } = benutzername
11294 Apache::AuthDBI::authen Config{ password         } = php.ga?P3Edo
11294 Apache::AuthDBI::authen Config{ pwdcasesensitive } = on
11294 Apache::AuthDBI::authen Config{ pwd_table        } = _access
11294 Apache::AuthDBI::authen Config{ pwd_field        } = passwort
11294 Apache::AuthDBI::authen Config{ log_field        } =
11294 Apache::AuthDBI::authen Config{ username         } = web29
11294 Apache::AuthDBI::authen Config{ encryption_salt  } = password
11294 Apache::AuthDBI::authen Config{ authoritative    } = on
11294 Apache::AuthDBI::authen Config{ log_string       } =
11294 Apache::AuthDBI::authen Config{ grp_whereclause  } =
11294 Apache::AuthDBI::authen Config{ data_source      } = dbi:mysql:usr_web29_1
11294 Apache::AuthDBI::authen Config{ pwd_whereclause  } =
11294 Apache::AuthDBI::authen passwd not found in cache
[Sun Feb 13 21:03:26 2005] [notice] child pid 16673 exit signal Segmentation fault (11)
[Sun Feb 13 21:03:26 2005] [notice] child pid 11294 exit signal Segmentation fault (11)