puppetlabs / puppetlabs/puppetlabs-apache
Support for AuthPAMService in directories
- Dominant language
- Puppet
- Stars
- 356
- Forks
- 1.1k
- Avg merge
- 3m
- Merged PRs (30d)
- 1
Description
Use Case
When using BasicAuth with PAM module, the AuthPAMService parameter can be configured:
From https://www.adelton.com/apache/mod_authnz_pam/
<Location /private>
AuthType Basic
AuthName "private area"
AuthBasicProvider PAM
AuthPAMService tlwiki
Require valid-user
</Location>
Describe the Solution You Would Like
Implement a auth_pam_service parameter in the directories template.
apache::vhost { 'example':
[...],
directories => [{
'provider' => 'location',
'path' => '/private',
'order' => 'deny,allow',
'require' => 'valid-user',
'auth_name' => 'private area',
'auth_type' => 'basic',
'auth_basic_provider' => 'PAM',
'auth_pam_service' => 'tlwiki',
}],
Describe Alternatives You've Considered
I don't see an alternative.
Additional Context
I did not find documentation on the official apache website, but Adelton is the official provider for the package in RockyLinux 9 from AppStream repository:
:~$ yum info mod_authnz_pam
Last metadata expiration check: 1:15:15 ago on Fri 13 Feb 2026 10:05:08 EST.
Installed Packages
Name : mod_authnz_pam
Version : 1.2.2
Release : 3.el9
Architecture : x86_64
Size : 31 k
Source : mod_authnz_pam-1.2.2-3.el9.src.rpm
Repository : @System
From repo : appstream
Summary : PAM authorization checker and PAM Basic Authentication provider
URL : https://www.adelton.com/apache/mod_authnz_pam/
License : ASL 2.0
Description : mod_authnz_pam is a PAM authorization module, supplementing
: authentication done by other modules, for example mod_auth_kerb; it
: can also be used as full Basic Authentication provider which runs the
: [login, password] authentication through the PAM stack.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the directories template and inspect how existing authentication parameters are represented. Add support for the requested auth_pam_service value, then verify that a directory configuration generates the corresponding Apache AuthPAMService directive.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- apache
- Domain
- devops
- Issue type
- Feature
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 25/100