libapache2-webauth_4.1.1-2_amd64.deb


Advertisement

Description

libapache2-webauth - Apache 2 modules for WebAuth authentication

Property Value
Distribution Debian 7 (Wheezy)
Repository Debian Main amd64
Package name libapache2-webauth
Package version 4.1.1
Package release 2
Package architecture amd64
Package type deb
Installed size 552 B
Download size 221.22 KB
Official Mirror ftp.br.debian.org
WebAuth is a cookie-based web authentication system built on top of
Kerberos.  It relies on a central authentication server that handles all
user authentication for a domain and creates user authentication
credentials for any web server that needs strong authentication.
This package contains the Apache 2 modules to do basic authentication for
individual web servers and to look up LDAP information using LDAP v3 with
GSSAPI binds about the authenticated user.  Directory information can be
used for authorization control and to populate environment variables.
These modules should be installed on any web server using WebAuth.

Alternatives

Package Version Architecture Repository
libapache2-webauth_4.6.0-2~bpo70+1_all.deb 4.6.0 all Debian Backports Main
libapache2-webauth_4.6.0-2~bpo70+1_all.deb 4.6.0 all Debian Backports Main
libapache2-webauth_4.1.1-2_i386.deb 4.1.1 i386 Debian Main
libapache2-webauth - - -

Requires

Name Value
apache2.2-common -
libc6 >= 2.3.4
libcurl3 >= 7.16.2
libkrb5-3 >= 1.6.dfsg.2
libldap-2.4-2 >= 2.4.7
libwebauth6 >= 4.1.0

Download

Type URL
Binary Package libapache2-webauth_4.1.1-2_amd64.deb
Source Package webauth

Install Howto

  1. Update the package index:
    # sudo apt-get update
  2. Install libapache2-webauth deb package:
    # sudo apt-get install libapache2-webauth

Files

Path
/etc/apache2/mods-available/webauth.conf
/etc/apache2/mods-available/webauth.load
/etc/apache2/mods-available/webauthldap.conf
/etc/apache2/mods-available/webauthldap.load
/usr/lib/apache2/modules/mod_webauth.so
/usr/lib/apache2/modules/mod_webauthldap.so
/usr/share/doc-base/webauth-protocol
/usr/share/doc/libapache2-webauth/NEWS.Debian.gz
/usr/share/doc/libapache2-webauth/README.Debian.gz
/usr/share/doc/libapache2-webauth/README.gz
/usr/share/doc/libapache2-webauth/TODO.gz
/usr/share/doc/libapache2-webauth/changelog.Debian.gz
/usr/share/doc/libapache2-webauth/changelog.gz
/usr/share/doc/libapache2-webauth/copyright
/usr/share/doc/libapache2-webauth/mod_webauth.html.en
/usr/share/doc/libapache2-webauth/mod_webauth.xml.gz
/usr/share/doc/libapache2-webauth/mod_webauthldap.html.en
/usr/share/doc/libapache2-webauth/mod_webauthldap.xml.gz
/usr/share/doc/libapache2-webauth/protocol.html
/usr/share/doc/libapache2-webauth/protocol.txt.gz
/usr/share/doc/libapache2-webauth/protocol.xml.gz
/usr/share/doc/libapache2-webauth/test-plan.gz
/usr/share/doc/libapache2-webauth/userauth.gz
/usr/share/doc/libapache2-webauth/examples/sample-webauth.conf
/usr/share/doc/libapache2-webauth/examples/stanford-ldap.conf
/usr/share/doc/libapache2-webauth/examples/stanford-webauth.conf

Changelog

2012-11-04 - Russ Allbery <rra@debian.org>
webauth (4.1.1-2) unstable; urgency=low
* Add Breaks of libwebkdc-perl and webauth-weblogin << 4.0.0 to
libwebauth-perl and of webauth-weblogin << 4.0.0 to libwebkdc-perl.
The API of the Perl modules changed in 4.0.0.  Thanks, Dameon Wagner.
(Closes: #691878)
2012-04-25 - Russ Allbery <rra@debian.org>
webauth (4.1.1-1) unstable; urgency=low
* New upstream release (no Apache 2.4 support yet; that's next).
- Fix webauth_user_info bug in interpreting login history timestamps.
- Fix login history timestamp handling in sample confirm template.
- Suppress history and token rights in sample confirm template when
those data elements are empty.  (Closes: #664735)
- Add explicit HTML filters to all sample template variable
interpolations as an additional security measure.
- Update the mod_webkdc manual for changes in 4.1.0.
* If Apache is running and has the module loaded, restart Apache on
configure of libapache2-webauth or libapache2-webkdc.
* Remove the conditional around the postinst actions for
libapache2-webauth and libapache2-webkdc and just always configure the
package.  This is at least arguably more correct for the various abort
cases, is simpler, and shouldn't hurt.
2012-03-15 - Russ Allbery <rra@debian.org>
webauth (4.1.0-1) unstable; urgency=low
* New upstream release.
- New mod_webkdc WebKdcUserInfoTimeout option to set a network timeout
for user information service queries.  The new default is 30
seconds.
- New mod_webkdc WebKdcUserInfoIgnoreFail error to allow users to
authenticate with password and use pre-existing single sign-on
cookies even if the user information service is down.  Be aware that
this can allow bypassing a centrally-mandated multifactor
requirement.
- Use remctl_set_ccache instead of setting KRB5CCNAME when available
to avoid memory leaks on calling the user information service and to
not leak settings across threads.
- Fix WebLogin error handling when the password field is left blank.
- Fix WebLogin error handling of empty usernames.
- Drop library support for base64-encoded token attributes (which was
never used by WebAuth).
- Drop webauth_info_{build,version} library APIs.
- Document Apache/Tomcat security interaction around URL parsing in
the mod_webauth manual.  This affects any Apache security mechanism
used in conjunction with Tomcat.
* Bump libremctl-dev build dependency to >= 3.1 for consistent builds.
* Add Build-Depends-Package to the symbols file for better dependency
handling.
* Update standards version to 3.9.3 (no changes required).
2011-12-02 - Russ Allbery <rra@debian.org>
webauth (4.0.2-1) unstable; urgency=low
* New upstream release.
- Fix setting of the REMOTE_USER preference cookie in WebLogin.
- Ignore undefined cookies in WebLogin to reduce error logs.
- Document factor codes in the mod_webauth manual.
* Remove ${shlibs:Depends} from libwebauth-dev dependencies to remove a
warning.  This package won't contain compiled binaries.
2011-09-23 - Russ Allbery <rra@debian.org>
webauth (4.0.1-1) unstable; urgency=low
* New upstream release.
- Change user information service and WebKDC to WebLogin protocols for
conveying suspicious login information to use the IP address as the
CDATA and put the hostname in an attribute.
- Display suspicious logins in WebLogin, forcing a confirmation page.
- Log the return URL of authentication requests to the WebKDC.
- Reduce mod_webauth log level when retrieving credentials.
2011-09-03 - Russ Allbery <rra@debian.org>
webauth (4.0.0-2) unstable; urgency=low
* Fix a variety of uninitialized variables and memory leaks in the
libwebauth library and the test suite.  Thanks, Christoph Egger and
Aaron M. Ucko.  (Closes: #640259)
* Don't attempt to chown files in libwebkdc-perl when doing a
binary-only build.  Thanks, Aaron M. Ucko.  (Closes: #640268)

See Also

Package Description
libapache2-webkdc_4.1.1-2_amd64.deb Apache 2 modules for a WebAuth authentication KDC
libapertium3-3.1-0-dev_3.1.0-2_amd64.deb Development library for Apertium
libapertium3-3.1-0_3.1.0-2_amd64.deb Shared library for Apertium
libapm-dev_3.2.2-14_amd64.deb Library for interacting with APM driver in kernel
libapm1_3.2.2-14_amd64.deb Library for interacting with APM driver in kernel
libapol-dev_3.3.7-3_amd64.deb Security Enhanced Linux policy analysis development
libapol4_3.3.7-3_amd64.deb Security Enhanced Linux policy analysis library
libapp-cache-perl_0.37-1_all.deb Easy application-level caching library for perl
libapp-cli-perl_0.313-1_all.deb Dispatcher module for command line interface programs
libapp-cmd-perl_0.318-1_all.deb Perl interface to write command line apps with less suffering
libapp-control-perl_1.02-2_all.deb Perl module for apachectl style control of another executable
libapp-daemon-perl_0.15-1_all.deb Perl module to start an Application as a Daemon
libapp-info-perl_0.56-1_all.deb Provide metadata about software packages installed
libapp-nopaste-perl_0.33-1_all.deb application for easy access to any pastebin
libapp-options-perl_1.12-1_all.deb command-line option values processing system
Advertisement
Advertisement