hard_timeout in $apr-parse

2010-02-22 Thread Gavin
Problem: We work with mobile phone networks, and sometimes the providers networks can be very slow. A user does a post (simple, or file upload) which hits out timeout length and fails. When this happens, because APR does a hard_timeout, it jumps(longjmp) back to apache and not clearing the perl

DAV ETag Patch

2010-02-22 Thread Brian J. France
Hello, It has been a while since my last patch, but this is the last supporting patch to mod_dav and httpd that is required before adding acl hooks into mod_dav for mod_dav_acl[1] http://www.brianfrance.com/software/apache/dav/dav-etag.diff This patch adds a new directive for mod_dav:

[PATCH 48780] Input and improvements requested for suggested enhancement 48780

2010-02-22 Thread Thomas, Peter
[ c.f. https://issues.apache.org/bugzilla/show_bug.cgi?id=48780 ] Eric Covener has commented, and I replied, to my suggested enhancement for mod_auth_ldap. In this case, I am attempting to use LDAP for authorization, accepting authentication from another provider--this would most typically be

Re: [PATCH 48780] Input and improvements requested for suggested enhancement 48780

2010-02-22 Thread Eric Covener
On Mon, Feb 22, 2010 at 11:46 AM, Thomas, Peter ptho...@hpti.com wrote: [ c.f. https://issues.apache.org/bugzilla/show_bug.cgi?id=48780 ] Eric Covener has commented, and I replied, to my suggested enhancement for mod_auth_ldap.  In this case, I am attempting to use LDAP for authorization,

RE: [PATCH 48780] Input and improvements requested for suggested enhancement 48780

2010-02-22 Thread Thomas, Peter
The beauty is that it doesn't change the authorization behavior, except to the extent that the bind-as-user is bypassed if the option is set. I only found one location that attempted to validate the user's password, so I surmized that was the 2nd [compare] operation, and I used the get user DN

Re: [PATCH 48780] Input and improvements requested for suggested enhancement 48780

2010-02-22 Thread Eric Covener
On Mon, Feb 22, 2010 at 12:15 PM, Thomas, Peter ptho...@hpti.com wrote: The beauty is that it doesn't change the authorization behavior, except to the extent that the bind-as-user is bypassed if the option is set.  I only found one location that attempted to validate the user's password, so I

RE: [PATCH 48780] Input and improvements requested for suggested enhancement 48780

2010-02-22 Thread Thomas, Peter
Yes, I believe this patch would do that so long as the user name passed by the other authentication provider in conjunction with the options to the LDAP provider brings back one-and-only-one result for valid users. Maybe we don't need to make all those checks and references against mod_ssl I

Re: [PATCH 48780] Input and improvements requested for suggested enhancement 48780

2010-02-22 Thread Eric Covener
On Mon, Feb 22, 2010 at 12:33 PM, Thomas, Peter ptho...@hpti.com wrote: Even if we do this, we * still * need this patch or something like it to tell the LDAP provider that it should only perform authorization, and not authentication.  [Effectively we would be telling it to start with the

Re: ACL changes in mod_dav

2010-02-22 Thread Brian J. France
On Feb 20, 2010, at 11:23 PM, markus.l...@dlr.de markus.l...@dlr.de wrote: I have added ACL features to the mod_dav module. Could you tell me the correct way to get this changes reviewed and into to official mod_dav-source? Did you use any of the public available mod_dav_acl[1] code? I

Re: DAV ETag Patch

2010-02-22 Thread Graham Leggett
On 22 Feb 2010, at 6:32 PM, Brian J. France wrote: It has been a while since my last patch, but this is the last supporting patch to mod_dav and httpd that is required before adding acl hooks into mod_dav for mod_dav_acl[1] http://www.brianfrance.com/software/apache/dav/dav-etag.diff This