Re: [Pam-discuss] Apache mod_auth_pam, pam_smb

[Alexander L. <ale...@sb...>]

On Mon, 19 Feb 2001, Steve Langasek wrote:

> I believe the problem here is actually the 'account' line.  This asks
> pam_unix to look in /etc/shadow for account expiration (authorization)
> information.  Since your webserver can't access /etc/shadow (but your ftp
> server can), it doesn't matter if you have correct information there.
> 
> A working /etc/pam.d/httpd might be:
> 
> auth    required       pam_smb_auth.so debug
> account required        pam_permit.so
> session required        pam_unix.so

Indeed, it is! Thanks a lot!

When thinking about the whole stuff, I already guessed that there might be
a problem when user www-data tries to read shadow information.

regards

Alex