>
>So what should I do ?
>I may split on the URL method and Digest-authorize only DAV
>methods (MKCOL, PROPFIND, etc) leaving GET/POST to Basic.

It sounds perfect, Filters are designed to be registered per method.
Probably your entire application will be a filter that responds to the DAV
methods. I didn't know this was so, you are lucky! I looked into the
possibility of using AOLserver as a SIP server using the same idea.



>Oh yes. I'd also like to re-use as much of the functionality of the
>nsperm module and have Digest only parse headers and validate password
>(stored in some different passwd file, of course).

You should look at the ns_perm and the ns_passwordcheck commands. Maybe you
can load the ns_perm module and use these if only partially. But I don't
think you can choose your own password file. If you are suggesting
re-writing the ns_perm module, I would consider doing it in tcl and either
exec'ing unix tools to do the work, or compile in a module with the
functions you need. Postpone as long as possible the writing of new C code.
You may be happy with the speed of tcl/exec.


>Other stuff should
>be left as-is (host/ip/domain-based checking, group checking and alike).
>That would be really cool.

Use ns_perm (the tcl command) for this.
http://aolserver.com/docs/devel/tcl/api/admin.html#ns_perm

--Tom Jackson

Reply via email to