I was thinking about this.  What about -eliminating- the mod_authn_default
and mod_authz_default, merging them into mod_auth, and moving the
directives from mod_auth_basic and mod_auth_digest into the common
mod_auth.

Mod_auth would further include all of the hooks, and be the common
module that all other mod_auth_foo, authn and authz modules require.

Does that make any sense?  I'm certain you will have users misconfigure
the 'backstop' modules (_default flavors) resulting in insecure servers.
If the 'backstop' _default auth handlers are always loaded as part of the
core mod_auth, users will have far fewer problems.

Bill

At 11:21 AM 9/17/2002, Doug MacEachern wrote:
>a fresh build/install of .42-dev:
>Cannot load
>/.../modules/mod_authn_file.so into server:
>/.../modules/mod_authn_file.so:
>undefined symbol: authn_register_provider
>
>stock httpd.conf is installed (by 'make install') with modules in this
>order:
>LoadModule authn_file_module modules/mod_authn_file.so
>LoadModule authn_dbm_module modules/mod_authn_dbm.so
>LoadModule authn_anon_module modules/mod_authn_anon.so
>LoadModule authn_default_module modules/mod_authn_default.so
>LoadModule authz_host_module modules/mod_authz_host.so
>LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
>LoadModule authz_user_module modules/mod_authz_user.so
>LoadModule authz_dbm_module modules/mod_authz_dbm.so
>LoadModule authz_default_module modules/mod_authz_default.so
>LoadModule auth_basic_module modules/mod_auth_basic.so
>LoadModule auth_digest_module modules/mod_auth_digest.so


Reply via email to