Apache 无法识别 mod_auth_openidc 个命令

Question

我正在尝试在 ubuntu 服务器上获取 mod_auth_openidc apache module 运行。我的问题是，apache 无法识别 module 的命令，尽管它已启用（使用 apachectl -M 检查）并且崩溃并显示来自 systemctl 的以下消息：

● apache2.service - LSB: Apache2 web server
   Loaded: loaded (/etc/init.d/apache2; bad; vendor preset: enabled)
  Drop-In: /lib/systemd/system/apache2.service.d
           └─apache2-systemd.conf
   Active: failed (Result: exit-code) since Mo 2016-09-05 15:43:59 CEST; 1min 8s ago
     Docs: man:systemd-sysv-generator(8)
  Process: 4357 ExecStop=/etc/init.d/apache2 stop (code=exited, status=0/SUCCESS)
  Process: 4383 ExecStart=/etc/init.d/apache2 start (code=exited, status=1/FAILURE)

Sep 05 15:43:59 vbox-ubuntu-shib apache2[4383]:  * The apache2 configtest failed.
Sep 05 15:43:59 vbox-ubuntu-shib apache2[4383]: Output of config test was:
Sep 05 15:43:59 vbox-ubuntu-shib apache2[4383]: AH00526: Syntax error on line 182 of /etc/apache2/apache2.conf:
Sep 05 15:43:59 vbox-ubuntu-shib apache2[4383]: Invalid command 'OIDCProviderMetadataURL', perhaps misspelled or defined by a module not included in the server configuration
Sep 05 15:43:59 vbox-ubuntu-shib apache2[4383]: Action 'configtest' failed.
Sep 05 15:43:59 vbox-ubuntu-shib apache2[4383]: The Apache error log may have more information.
Sep 05 15:43:59 vbox-ubuntu-shib systemd[1]: apache2.service: Control process exited, code=exited status=1
Sep 05 15:43:59 vbox-ubuntu-shib systemd[1]: Failed to start LSB: Apache2 web server.
Sep 05 15:43:59 vbox-ubuntu-shib systemd[1]: apache2.service: Unit entered failed state.
Sep 05 15:43:59 vbox-ubuntu-shib systemd[1]: apache2.service: Failed with result 'exit-code'.

相关 apache2.conf 部分：

OIDCProviderMetadataURL testUrl.com
OIDCClientID testId
OIDCClientSecret testSecret

OIDCRedirectURI http://example.de
OIDCCryptoPassphrase testPassword

Alias "/secure-openid" "/var/www/secure"
<Location /secure-openid>
    AuthType openid-connect
    Require valid-user
</Location>

apachectl -M 的输出：

Loaded Modules:
 core_module (static)
 so_module (static)
 watchdog_module (static)
 http_module (static)
 log_config_module (static)
 logio_module (static)
 version_module (static)
 unixd_module (static)
 access_compat_module (shared)
 alias_module (shared)
 auth_basic_module (shared)
 authopenid_module (shared)
 authn_core_module (shared)
 authn_file_module (shared)
 authz_core_module (shared)
 authz_host_module (shared)
 authz_user_module (shared)
 autoindex_module (shared)
 deflate_module (shared)
 dir_module (shared)
 env_module (shared)
 filter_module (shared)
 mime_module (shared)
 mpm_event_module (shared)
 negotiation_module (shared)
 setenvif_module (shared)
 mod_shib (shared)
 status_module (shared)

libapache2-mod-auth-openid 版本：0.8-1build1

apache2 版本：2.4.18-2ubuntu3.1

我完全不知道这个问题是从哪里来的，在此先感谢您的帮助！

Answer 1

您的 apachectl -M 输出显示了 authopenid_module 模块，但这是您要使用的来自 https://github.com/bmuller/mod_auth_openid. You need to make sure that auth_openidc_module is loaded instead, which is the OpenID Connect implementation from https://github.com/pingidentity/mod_auth_openidc 的遗留 OpenID 2.0 模块。

Apache 无法识别 mod_auth_openidc 个命令

Apache doesn't recognize mod_auth_openidc commands

apache

openid

mod-auth-openidc