problem with "note_basic_auth_failure"

Marina Markus Thu, 28 Oct 2004 11:32:02 -0700

Hello,

I am trying to implement authentication with my own mod_perl subroutine defined as PerlAuthenHandler (Apache 1.3.31 + mod_perl 1.29 + PHP 4.3.8 installed on RedHat 7.2), and encounter a strange problem that I hope someone has seen before.

As the first step, I want my subroutine to reject all authentication attempts.

For this, it calls "note_basic_auth_failure" and then returns AUTH_REQUIRED.

It does not work – the authentication popup window appers, but closes after giving any username-password, and the page is displayed unrestrictedly (instead of requiring authentication again till it succeeds, as happens when using AuthUserFile instead).

The subroutine behaves as if the call to "note_basic_auth_failure" just does nothing; all other calls like " log_reason" etc work OK. No Perl errors appear in "error.log".

Settings in "httpd.conf" are:

PerlAuthenHandler My::Auth::authen_handler

AuthType Basic

AuthName Testings

Require valid-user

</Location>

The file "My/Auth.pm" is very simple (tries to reject any attempt):

package My::Auth;

use mod_perl ();

sub authen_handler {

my $r = shift;

my $rip=$r->connection->remote_ip;

# get user's authentication credentials

my ($res, $sent_pw) = $r->get_basic_auth_pw;

$r->note_basic_auth_failure;

$r->log_reason("getting u-p error was".$res);

return $res if $res != OK;

my $user = $r->connection->user;

#reject and ask again – does not work !!!

$r->note_basic_auth_failure;

$r->log_reason("forbidding $user from $rip", $r->uri);

return AUTH_REQUIRED;

}

Hope someone will see wrong settings or errors in the code that I overlook.

Grareful for any hints,

Marina Markus

[EMAIL PROTECTED]

problem with "note_basic_auth_failure"

Reply via email to