"Palmer J.D.F." <[EMAIL PROTECTED]> wrote:
> The gifs etc are located in an unprotected directory, surely this prevents
> from having to re-authenticate for each?

  Yes.

> A bit of a dig around reveals this from the Apache site, which implies that
> all browsers cache the credentials.
> http://httpd.apache.org/docs/howto/auth.html#basicfaq  

  Well, that's changed since I wrote the module.  It's irritating as
heck, too.

  The only solution is to take a hint from mod_securid, and put the
username & password on an auto-generated HTML page, where the browser
won't cache them.

  That would involve a complete re-write of the module, though.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to