Filewatcher File Search File Search
Content Search
» » » » »


An Apache module for authentication using /etc/shadow

When performing this task one encounters one fundamental difficulty: The /etc/shadow file is supposed to be read/writable only by root. However, the webserver is supposed to run under a non-root user, such as "www-data".

mod_auth_shadow addresses this difficulty by opening a pipe to an suid root program, validate, which does the actual validation. When there is a failure, validate writes an error message to the system log, and waits three seconds before exiting.

Package version:1.3-3.1woody.2


mod_auth_shadow - An Apache module for authentication using /etc/shadow.

by Brian Duggan <>

Copyright 2000 OVEN Digital
This software may be distributed under the terms of the GNU General Public License (GPL).

    README      - this file
    INSTALL     - installation instructions
    CHANGES     - release notes
    Makefile    - the makefile
    mod_auth_shadow.c - so


mod-auth-shadow for Debian

To configure a directory to be readable only by valid users
of the system, the following could be added to httpd.conf:

  <Location /path/to/directory>
      AuthName whateveryoulike
      AuthShadow on
      AuthType Basic
      require valid-user

 The "AuthShadow on" directive tells the authentication handler to
 take effect. 


mod-auth-shadow (1.3-3.1woody.2) oldstable-security; urgency=high

  * Non-maintainer upload by the Security Team
  * Added patch by Marcin Owsiany to check the auth_shadow_flag in
    authshadow_valid_user() which fixes the problem where auth_shadow
    always turned itself on when require group was specified
    [mod_auth_shadow.c, CAN-2005-2963]

 -- Martin Schulze <>  Sun, 25 


After 0.80 release:
    Passed INSTBINDIR to apxs when compiling mod_auth_shadow.c
    Added DECLIN


This package was debianized by Marcin Owsiany <> on
Sat,  3 Nov 2001 00:19:20 +01

Browse inside libapache-mod-auth-shadow_1.3-3.1woody.2_i386.deb

         [DIR]DEBIAN/ (5)  65535+ mirrors
         [DIR]usr/ (2)  65535+ mirrors

Download libapache-mod-auth-shadow_1.3-3.1woody.2_i386.deb

Results 1 - 1 of 1
Help - FTP Sites List - Software Dir.
Search over 15 billion files
© 1997-2017