I was looking at mod_auth_basic.c and mod_auth_digest.c in both 2.2 and
trunk to try and see whether there was any reason why there is an
AuthBasicAuthoritative directive, but no AuthDigestAuthoritative.  I was
expecting the code in authenticate_basic_user and
authenticate_digest_user to be similar in its error handling, which they
sort of are, but mod_auth_basic will return DECLINED if auth_result is
neither AUTH_GRANTED nor AUTH_DENIED and authoritative is set.

Is this difference in module behaviour intentional or just due to the
modules developing independently?

Andrew

-- 
Andrew Ford,  Director    Pauntley Prints / Ford & Mason Ltd            
[EMAIL PROTECTED]   South Wing Compton House                      
pauntley-prints.co.uk     Compton Green, Redmarley  Tel: +44 1531 829900
ford-mason.co.uk          Gloucester GL19 3JB       Fax: +44 1531 829901
refcards.com cronolog.org Great Britain          Mobile: +44 7785 258278


Reply via email to