Am Wednesday, 23. July 2003 14:11, schrieb Misha Kapushesky:

> Unfortunately, I don't have any one specific question to ask. I've been
> working for about a week and a half on getting A::A::P::S to work

Sorry for that. I feel a bit embarassed that A::A::P::S keeps being difficult.

> So my question is, basically, how do I set up cookie-based session
> management together with a login/logout page for a specific directory
> under my apache web server?

Well, first of all, you should always use the Cookie+URL mechanism, as the 
current implementation fails (with infinite redirects, see below) if cookies 
are used and the browser doesn't accept them.

> I got this far:
>
> 1. I got session id's to work (but for some reason cannot get cookies to
> be produced - trying to set up settings like in the docs causes infinite
> redirects, etc.). So, any help here will be appreciated... Ideally I'd
> like sessions to be used with

Double check your browser settings, development webserver config and so on - I 
regularly see URL sessions in use with my own development setup, although on 
the live site, cookie sessions are used. I think it might have something to 
do with the finer details of cookies and browsers, possibly a browser bug, a 
A::A::P::S bug or even behaviour that is correct (though annoying).

> 2. I got the axkitdemo auth.xsp to work. Yay. It adds, sets, removes
> access, displays permissions (knows about my "require user" settings
> from httpd.conf) and knows how to encrypt passwords.

This is worth a lot - it means you have everything important working.

> So, the final question -- can someone post an example _setup_ for this
> sort of situation? Including httpd.conf, login.xsp and logout.xsp (the
> latter not as necessary).

I've created this page:
http://www.axkit.org/wiki/view/AxKit/ApacheAxKitPluginSession
I have not tested it, however, but adapted it from a working site. Please 
report success or failure, and feel free to add more examples if you get 
other setups working correctly.


-- 
CU
   Joerg

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to