Jump to content
Read the Funtoo Newsletter: Summer 2023 ×

Tengine auth_pam


uudruid74

Recommended Posts

I want to authenticate users against a mysql database (joomla) before allowing access to certain areas of the filesystem. I'm using tengine. I found an auth_pam that can be used to authenticate against myself through pam.

 

How can I install this under funtoo for tengine? Anyone do anything like this before?

 

Thanks

 

Sent from my A0001 using Tapatalk

Link to comment
Share on other sites

No, I don't care about scalability and I doubt Ill ever have more than a handful of users (total). On a single machine ldap would be a waste as it uses mysql as its backend. And joomla is just a cms. I don't think it can auth against leap.

 

Besides, I'm not trying to make this more complicated. I just don't want to have the password protection used for access to sensitive files to be different from the joomla password. I hate having to maintain multiple passwords for a single website and want to do that to someone else.

Link to comment
Share on other sites

You misunderstood the problem. I can work with pam and all that. This isnt an admin question but more of a tengine question with some funtoo complications.

 

OOTB, Nginx and tengine only support file based, auth_basic authentication. Joomla has its own authentication and user scheme which is backed by mysql. I have some stuff I want to protect in the file system so HTTP authentication makes more sense than relying on joomla to protect access (since you could always use a direct URL to bypass php)

 

There is an external module which you either have to compile from source or install as an "extras" RPM which provides auth_pam. This is only ever mentioned for nginx, not tengine, but it should (in theory) be compatible especially if compiled from source against tengine's tree.

 

Now, enter funtoo. There is no rebuild for this so if it works, it could get destroyed on the next update. I am NOT changing Linux user authentication. Pam can be used to authenticate any subsystem against anything else, so this one auth_pam would let nginx (and hopefully tengine) authenticate against anything.

 

Make more sense now?

 

Sent from my A0001 using Tapatalk

Link to comment
Share on other sites

 

 

Now, enter funtoo. There is no rebuild for this so if it works, it could get destroyed on the next update.

 

Sent from my A0001 using Tapatalk

Tapatalk wont let me re-edit and my phone auto-corrected. Should have said Ebuild, not rebuild. Sorry

 

Sent from my A0001 using Tapatalk

Link to comment
Share on other sites

I don't like the idea of having to install yet more software on my system, and then move these files out of the web server directory to somewhere else. Then, the pyd.io demo failed on my phone. I couldn't tap on the password field, had to use my tab key (which most keyboards don't have) and it still wouldn't log in. Not impressed.

 

I just want to use a different authentication method in tengine. That shouldn't be too hard.

 

Sent from my A0001 using Tapatalk

Link to comment
Share on other sites

I don't like the idea of having to install yet more software on my system, and then move these files out of the web server directory to somewhere else. Then, the pyd.io demo failed on my phone. I couldn't tap on the password field, had to use my tab key (which most keyboards don't have) and it still wouldn't log in. Not impressed.

 

I just want to use a different authentication method in tengine. That shouldn't be too hard.

 

Sent from my A0001 using Tapatalk

Oh... and one more thing. This wouldn't solve my problem at all. I want to avoid two sets of passwords. I doubt pyd.io will authenticate against my joomla database, will it?

 

Sent from my A0001 using Tapatalk

Link to comment
Share on other sites

Oh... and one more thing. This wouldn't solve my problem at all. I want to avoid two sets of passwords. I doubt pyd.io will authenticate against my joomla database, will it?

 

Sent from my A0001 using Tapatalk

 

Well it may need some hacking... I never tried to integrate it with some other piece of software but it shouldn't be too hard. See here [1] for some other software which runs natively under Joomla as a plugin.

 

 

[1] http://extensions.joomla.org/extension/extplorer

Link to comment
Share on other sites

Well it may need some hacking... I never tried to integrate it with some other piece of software but it shouldn't be too hard. See here [1] for some other software which runs natively under Joomla as a plugin.

 

 

[1] http://extensions.joomla.org/extension/extplorer

The problem with a native Joomla solution is that the files would have to be moved to where the web server can't get them and you'd need to always log in through Joomla.

 

I want easy direct URLs with no Joomla crap. I don't want a Joomla module. I just don't want two sets of passwords. Under Apache, you have a number of auth modules to authenticate the user. I need to be able to do that with tengine

 

Sent from my A0001 using Tapatalk

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...