I would probably implement choice one for now. ($user:$realm first, then $user.)hmm, although "$user:$realm" semantically _is_ the key, that causes the problem, that mod_authz_dbm won't support it (it currently doesn't support digest authentication anyway). What would be the best variant?- do some magic, i.e. if AuthType digest then use "$user" and "$user:$realm" as lookup key (in which order?) - make it configurable (additional argument to AuthDBMGroupFile?) - consider a provider mechanism for authorization modules, too? My favourites are the second or third option :) better ideas?
Note that I always planned on adding a provider mechanism for authorization modules, but somehow got sidetracked on that. But, yeah, that should definitely happen, too. =) (Choice 2 doesn't make a whole lot of sense to me.) -- justin
