RE: Making mod_auth_digest mysql

2009-02-12 Thread Michele Waldman
Lol. I'm using the proper syntax on the server. Just checked. -Original Message- From: Eric Covener [mailto:cove...@gmail.com] Sent: Thursday, February 12, 2009 2:49 PM To: modules-dev@httpd.apache.org Subject: Re: Making mod_auth_digest mysql On Thu, Feb 12, 2009 at 2:25 PM, Michele

Re: Making mod_auth_digest mysql

2009-02-12 Thread Eric Covener
On Thu, Feb 12, 2009 at 3:27 PM, Michele Waldman mmwald...@nyc.rr.com wrote: RewriteCond ${REMOTE_USER} . does not seem to work when the REMOTE_USER is not defined. The statement evaluates to true. What happens when you use the proper syntax, %{REMOTE_USER}? Lol. I'm using the proper

RE: Making mod_auth_digest mysql

2009-02-12 Thread Michele Waldman
Basically, when I user is logged out, %{REMOTE_USER} is not defined. It seems any rewritecode using an undefined server environment variable always evaluates to true. I don't want this. I want false if not defined. I'm going to hack apache, if I have to. Michele -Original Message-

Re: Making mod_auth_digest mysql

2009-02-12 Thread Eric Covener
On Thu, Feb 12, 2009 at 3:44 PM, Michele Waldman mmwald...@nyc.rr.com wrote: Basically, when I user is logged out, %{REMOTE_USER} is not defined. It seems any rewritecode using an undefined server environment variable always evaluates to true. I don't want this. I want false if not defined.

Re: Making mod_auth_digest mysql

2009-02-12 Thread Eric Covener
On Thu, Feb 12, 2009 at 3:49 PM, Michele Waldman mmwald...@nyc.rr.com wrote: I'm doing this: RewriteEngine On RewriteCond %{REMOTE_USER} . RewriteRule ^.*$ - [S=1] RewriteRule ^.*$ http://domain/logged_out.html?%{N} [R] AuthType Digest AuthName account AuthUserFile /path/.htpasswd

Re: Making mod_auth_digest mysql

2009-02-12 Thread Joe Lewis
Michele Waldman wrote: I'm doing this: RewriteEngine On RewriteCond %{REMOTE_USER} . RewriteRule ^.*$ - [S=1] RewriteRule ^.*$ http://domain/logged_out.html?%{N} [R] AuthType Digest AuthName account AuthUserFile /path/.htpasswd Require valid-user 1) The user is logged in. 2) The user logs

RE: Making mod_auth_digest mysql

2009-02-12 Thread Michele Waldman
There is not authentication requirement for logged_out it's in a higher directory. -Original Message- From: Joe Lewis [mailto:j...@joe-lewis.com] Sent: Thursday, February 12, 2009 4:46 PM To: modules-dev@httpd.apache.org Subject: Re: Making mod_auth_digest mysql Michele Waldman wrote:

Re: Making mod_auth_digest mysql

2009-02-12 Thread Joe Lewis
Michele Waldman wrote: There is not authentication requirement for logged_out it's in a higher directory. Okay, then. I'm afraid I am not understanding everything here. I doubt the wheel needs to be reimplemented, but it seems the push is in that direction. For my feeble mind, can you

RE: Making mod_auth_digest mysql

2009-02-12 Thread Michele Waldman
It is different that just authenticating. Due to an htaccess authentication implementation, it requires a work around to prevent those pesky popups the browsers produce. I'm trying to do a spin on this: http://www.berenddeboer.net/rest/authentication.html Implementing the mod_auth_digest

Re: Making mod_auth_digest mysql

2009-02-12 Thread Joe Lewis
Michele Waldman wrote: All the actual authentication if fine. I wouldn't rely on cookies for security. It sounds like cookies would be a fake security. I was thinking about creating a logout cookie. Then, the popup would only happen if the user hacked their cookies. Shame on them. But it

Re: [summary] accept mod_fcgid codebase into httpd project

2009-02-12 Thread Chris Darroch
Roy T. Fielding wrote: I ended up fixing all website generation to utf-8 -- I am surprised that it lasted this long with just iso-8859-1. Thanks -- looks good! Yes, that is what I prefer as well. All paperwork is done, so please let us know when you have an export. I (or one of the

RE: Making mod_auth_digest mysql

2009-02-12 Thread Michele Waldman
RewriteCond ${REMOTE_USER} . does not seem to work when the REMOTE_USER is not defined. The statement evaluates to true. I plan of writing -e directive. Michele -Original Message- From: Bob Ionescu [mailto:bobsie...@googlemail.com] Sent: Monday, February 09, 2009 8:34 AM To:

Re: Making mod_auth_digest mysql

2009-02-12 Thread Ray Morris
I'd double check and triple check - something undefined can't match anything. What is the EXACT code you're using? Also, rewrite has -f to check to see if it's a file, and -d for a directory, just like the standard test command, Perl, and other common tools. These common tools use -e to

Re: Making mod_auth_digest mysql

2009-02-12 Thread Eric Covener
On Thu, Feb 12, 2009 at 2:25 PM, Michele Waldman mmwald...@nyc.rr.com wrote: RewriteCond ${REMOTE_USER} . does not seem to work when the REMOTE_USER is not defined. The statement evaluates to true. What happens when you use the proper syntax, %{REMOTE_USER}? -- Eric Covener

Transparent proxy setup works fine, but want to confirm the settings

2009-02-12 Thread Pranav Desai
Hello All, I am trying to setup Apache 2.2.9 as a transparent proxy. So that the users don't have to configure their browsers. Now the URLs coming in are relative for transparent proxy, so normally apache tries to look it up on the filesystem and it obviously fails. So I added a RewriteRule to

Re: Transparent proxy setup works fine, but want to confirm the settings

2009-02-12 Thread Jeff Sadowski
I've never used Apache as a transparent proxy I've always used squid. On Thu, Feb 12, 2009 at 7:50 PM, Pranav Desai pranavade...@gmail.com wrote: Hello All, I am trying to setup Apache 2.2.9 as a transparent proxy. So that the users don't have to configure their browsers. Now the URLs coming