On 2003.11.02, Zoran Vasiljevic <[EMAIL PROTECTED]> wrote:
>
> That's what I already told... One must do these things by hand in Tcl.
> But this point shows a *limitation* in the current AS design.

Exactly how is this a limitation?  If it were the case that there WAS no
way to implement Digest authentication under the current AOLserver, I'd
say then THAT would be a limitation.

It's important to distinguish between "not yet implemented" vs. "not
currently implementable."  The former is simply not feature complete.
The latter is a flaw in the design.

AOLserver has few design flaws.  It does, however, not very feature
complete.  Given my choice, I much prefer something that does a few
things exceptionally well than something that does everything but
poorly or as a conglomeration of hacks.

> Much better would be to be able to register callbacks (C or Tcl) at some
> points in the request processing which would do the right thing.
> Then, other high-level stuff like "ns_conn authuser" would already return
> "correct" values.

Is there really that much demand for Digest authentication?  Other than
non-SSL WebDAV, what else actually implements Digest auth as a
requirement?

-- Dossy

--
Dossy Shiobara                       mail: [EMAIL PROTECTED]
Panoptic Computer Network             web: http://www.panoptic.com/
  "He realized the fastest way to change is to laugh at your own
    folly -- then you can let go and quickly move on." (p. 70)


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.

Reply via email to