Re: Multiple AAA providers

2005-03-04 Thread Graham Leggett
Justin Erenkrantz said: I still maintain the better way to do this is to handle it in the provider modules themselves by leveraging the provider API instead. To reiterate, in my mind, the ideal syntax is: Location /foo LDAPProvider ldap1 ...config options for mod_authnz_ldap...

relatively minor 2.1 API change

2005-03-04 Thread Jeff Trawick
worker_score in scoreboard.h needs a pid_t field. The worker MPM (and probably some other Unix threaded MPMs) has a perhaps-unexpected way of handling child processes which are terminating gracefully -- it allows new child processes to take over the process_score structure and the worker_score

Re: modules that register hooks after the register_hooks call-back is finished

2005-03-04 Thread Jeff Trawick
On Thu, 3 Mar 2005 06:59:43 -0500, Jeff Trawick [EMAIL PROTECTED] wrote: is this a normal idiom? is there a point prior to normal request processing where it is safe to walk through the hooks to figure stuff out? should we document that register_hooks is the one place to do that?

Re: Authentication Needs for Apache: Was Re: Puzzling News

2005-03-04 Thread Sean Mehan
Hi. Thanks for this. I've been tied up with a couple of things, so please pardon the delay. As far as this goes, Erik is correct, to a point!-) Just for tightness, I want to make this as clear as mud!-) To my read, and this meshes with others, SAML is open. RSA

Re: Multiple AAA providers

2005-03-04 Thread Brad Nicholes
Actually I think the better syntax would be: AuthProviderAlias ldap Myldap1 ...config options for mod_authnz_ldap... /AuthProviderAlias AuthProviderAlias ldap Myldap2 ...config options for mod_authnz_ldap... /AuthProviderAlias AuthProviderAlias file Myfile1 ...config options for

Re: Multiple AAA providers

2005-03-04 Thread Justin Erenkrantz
--On Friday, March 4, 2005 8:56 AM -0700 Brad Nicholes [EMAIL PROTECTED] wrote: Actually I think the better syntax would be: AuthProviderAlias ldap Myldap1 ...config options for mod_authnz_ldap... /AuthProviderAlias AuthProviderAlias ldap Myldap2 ...config options for mod_authnz_ldap...

Re: Multiple AAA providers

2005-03-04 Thread William A. Rowe, Jr.
At 01:30 AM 3/4/2005, Justin Erenkrantz wrote: On Thu, Mar 03, 2005 at 08:40:22PM -0600, William A. Rowe, Jr. wrote: And attached is the module for comment. I have no time till this weekend if then, so I've got the build system changes and will commit if we like. My question as to how this

Re: relatively minor 2.1 API change

2005-03-04 Thread William A. Rowe, Jr.
At 04:20 AM 3/4/2005, Jeff Trawick wrote: worker_score in scoreboard.h needs a pid_t field. As long as you store the pid:tid atom, I'm +1. Quite right, those tid's can become somewhat meaningless out of context. Bill

Re: Multiple AAA providers

2005-03-04 Thread William A. Rowe, Jr.
At 11:14 AM 3/4/2005, Justin Erenkrantz wrote: --On Friday, March 4, 2005 8:56 AM -0700 Brad Nicholes [EMAIL PROTECTED] wrote: Actually I think the better syntax would be: AuthProviderAlias ldap Myldap1 ...config options for mod_authnz_ldap... /AuthProviderAlias AuthProviderAlias ldap

Re: Multiple AAA providers

2005-03-04 Thread Justin Erenkrantz
--On Friday, March 4, 2005 11:27 AM -0600 William A. Rowe, Jr. [EMAIL PROTECTED] wrote: yup, that's what mod_auth_config did. However, mod_auth_config; 1. invokes auth for the local directives (not Auth sectioned) 2. invokes auth for all Auth sections. providing the explicit list in

Re: relatively minor 2.1 API change

2005-03-04 Thread Jim Jagielski
On Mar 4, 2005, at 5:20 AM, Jeff Trawick wrote: worker_score in scoreboard.h needs a pid_t field. The worker MPM (and probably some other Unix threaded MPMs) has a perhaps-unexpected way of handling child processes which are terminating gracefully -- it allows new child processes to take over the

Re: Multiple AAA providers

2005-03-04 Thread William A. Rowe, Jr.
At 11:34 AM 3/4/2005, Justin Erenkrantz wrote: --On Friday, March 4, 2005 11:27 AM -0600 William A. Rowe, Jr. [EMAIL PROTECTED] wrote: yup, that's what mod_auth_config did. However, mod_auth_config; 1. invokes auth for the local directives (not Auth sectioned) 2. invokes auth for all Auth

Re: relatively minor 2.1 API change

2005-03-04 Thread Jeff Trawick
On Fri, 04 Mar 2005 11:15:25 -0600, William A. Rowe, Jr. [EMAIL PROTECTED] wrote: At 04:20 AM 3/4/2005, Jeff Trawick wrote: worker_score in scoreboard.h needs a pid_t field. As long as you store the pid:tid atom, I'm +1. Quite right, those tid's can become somewhat meaningless out of

worker MPM: it sucks to have minimal MaxSpareThreads

2005-03-04 Thread Jeff Trawick
Start with something like this: MaxClients 150 ... MaxSpareThreads 75 in the default conf file, which is a very reasonable way to run. Then realize you need to support boatloads more clients, so you bump up MaxClients to 5000. Now when load changes very slightly (as a percentage of

Re: relatively minor 2.1 API change

2005-03-04 Thread William A. Rowe, Jr.
That scares me from a win32 perspective; fyi. apr_os_thread_t is a HANDLE, an object meaningless outside the scope of a specific process. If Win32 goes 2x ++ processes, this data doesn't help. But obviously, apr_thread_t is a complex structure, so it's not the right choice either. Perhaps a

Re: relatively minor 2.1 API change

2005-03-04 Thread Jeff Trawick
On Fri, 04 Mar 2005 14:26:36 -0600, William A. Rowe, Jr. [EMAIL PROTECTED] wrote: That scares me from a win32 perspective; fyi. apr_os_thread_t is a HANDLE, an object meaningless outside the scope of a specific process. looks like OS/2, BEOS, and NetWare MPMs use that thread id field,

Yahoo! Auto Response

2005-03-04 Thread bustamam98
This email address is no longer valid. Original Message: X-YahooFilteredBulk: 200.175.3.84 Authentication-Results: mta160.mail.re2.yahoo.com from=httpd.apache.org; domainkeys=neutral (no sig) X-Originating-IP: [200.175.3.84] Return-Path: dev@httpd.apache.org Received:

mod_cache

2005-03-04 Thread Sander Striker
Hi, I'm going over mod_cache and I'm wondering about some things: -- modules/cache/mod_cache.c:271 /* If the request has Cache-Control: no-store from RFC 2616, don't store * unless CacheStoreNoStore is active. */ cc_in = apr_table_get(r-headers_in, Cache-Control); if (r-no_cache