On Tue, Dec 04, 2007 at 06:19:52PM -0600, William A. Rowe, Jr. wrote:
> So...
> 
>  * if there is a user flag to allow case insensitive user names, that
>    must be a directive at the auth provider

Yep, but some providers have no choice but to tag their name as
case insensitive (e.g., mod_authz_owner for "Require file-owner").
For others, it can be an option.

>  * the auth provider needs to tag the username identified as either
>    case sensitive or case sensitive, for later providers such as group
>    lookups to behave properly.

Very good point. The username would thus become an "object", with a
"compare" method?

As a start, a function could be added to apr, alongside
apr_uid_name_get(), for instance apr_system_username_cmp().
Like apr_uid_name_get(), it would be platform dependent, and each
comparison against a system username would be abstracted out.

   Martin
-- 
<[EMAIL PROTECTED]>        |     Fujitsu Siemens
http://www.fujitsu-siemens.com/imprint.html | 81730  Munich,  Germany

Reply via email to