> >So what should I do ? >I may split on the URL method and Digest-authorize only DAV >methods (MKCOL, PROPFIND, etc) leaving GET/POST to Basic.
It sounds perfect, Filters are designed to be registered per method. Probably your entire application will be a filter that responds to the DAV methods. I didn't know this was so, you are lucky! I looked into the possibility of using AOLserver as a SIP server using the same idea. >Oh yes. I'd also like to re-use as much of the functionality of the >nsperm module and have Digest only parse headers and validate password >(stored in some different passwd file, of course). You should look at the ns_perm and the ns_passwordcheck commands. Maybe you can load the ns_perm module and use these if only partially. But I don't think you can choose your own password file. If you are suggesting re-writing the ns_perm module, I would consider doing it in tcl and either exec'ing unix tools to do the work, or compile in a module with the functions you need. Postpone as long as possible the writing of new C code. You may be happy with the speed of tcl/exec. >Other stuff should >be left as-is (host/ip/domain-based checking, group checking and alike). >That would be really cool. Use ns_perm (the tcl command) for this. http://aolserver.com/docs/devel/tcl/api/admin.html#ns_perm --Tom Jackson
