Re: Apache support for form authentication

2008-04-09 Thread Guenter Knauf
Hi Graham, The mod_session_dbd module is written but not yet completely tested, and the mod_auth_form module is written, tested, but not yet documented. This should be completed over the next few days. maybe you can already commit mod_auth_form for the un-patient even though docu might not be

Re: Apache support for form authentication

2008-04-09 Thread Graham Leggett
Guenter Knauf wrote: maybe you can already commit mod_auth_form for the un-patient even though docu might not be ready yet? I've just now a little bit time to look into building the whole session stuff properly on NetWare... I just did :) Regards, Graham -- smime.p7s Description: S/MIME

Re: Apache support for form authentication

2008-04-09 Thread Guenter Knauf
Hi Graham, maybe you can already commit mod_auth_form for the un-patient even though docu might not be ready yet? I've just now a little bit time to look into building the whole session stuff properly on NetWare... I just did :) and even with docu!! Thanks very much! Guenter.

Re: Apache support for form authentication

2008-04-07 Thread Chris Darroch
Graham Leggett wrote: The session modules are all designed to go exclusively inside Directory and Location sections, which allow you to precisely target which URL space your session is valid for, and this can be repeated as many times as you like creating as many individual sessions as you

Re: Apache support for form authentication

2008-04-06 Thread Graham Leggett
William A. Rowe, Jr. wrote: Hmmm... why can't I use a session across an entire vhost? As in RSRC_CONF|ACCESS_CONF? Regards, Graham -- smime.p7s Description: S/MIME Cryptographic Signature

Re: Apache support for form authentication

2008-04-05 Thread Graham Leggett
Chris Darroch wrote: Great idea. What would you think about converting from the session_save hook to a provider-based mechanism? I can imagine that administrators might want/need to use one kind of storage provider (dbd, say) for sessions on high-priority virtual hosts, while using another

Re: Apache support for form authentication

2008-04-05 Thread William A. Rowe, Jr.
Graham Leggett wrote: The session modules are all designed to go exclusively inside Directory and Location sections, which allow you to precisely target which URL space your session is valid for, and this can be repeated as many times as you like creating as many individual sessions as you

Apache support for form authentication

2008-04-04 Thread Graham Leggett
Hi all, Despite having a very capable pluggable aaa subsystem built into httpd, the two main mechanisms for access remain mod_auth_basic and mod_auth_digest. Many web applications demand more flexible or user friendly ways to log into the server, and so every application server out there

Re: Apache support for form authentication

2008-04-04 Thread Nick Kew
On Fri, 04 Apr 2008 17:03:06 +0200 Graham Leggett [EMAIL PROTECTED] wrote: It would be significantly simpler to teach Apache how to do form logins, +1. It's something no doubt most of us have reinvented. A standardised/bundled solution would be great! It is hoped that with a standard

Re: Apache support for form authentication

2008-04-04 Thread Chris Darroch
Graham Leggett wrote: A session is a simple table of key value pairs. mod_session_dbd stores sessions within a SQL database. The session is tracked by a cookie, very similar to a typical Tomcat session. The catch is that you need a database beefy enough to handle the resulting load, which