Perl Authorization handler called before authentication handler

2014-09-12 Thread Lathan Bidwell
I have looked all around apache's documentation on how to upgrade from 2.2 to 2.4, but they don't include much about using PerlAddAuthzProvider or PerlAuthenHandler. I have this config section: PerlAddAuthzProvider membersuser Application::User::Members-authorize24 DirectoryMatch ^.*/members/

Re: Perl Authorization handler called before authentication handler

2014-09-12 Thread Lathan Bidwell
, but I think its probably better to make it more obvious as to what the config is doing. This module is used to be able to set up members / subscription areas fairly dynamically on the site. On Fri, Sep 12, 2014 at 12:42 PM, André Warnier a...@ice-sa.com wrote: Lathan Bidwell wrote: I have looked

Re: Perl Authorization handler called before authentication handler

2014-09-12 Thread Lathan Bidwell
...@herlug.org.uk wrote: On Fri, Sep 12, 2014 at 12:14:35PM -0400, Lathan Bidwell wrote: I have looked all around apache's documentation on how to upgrade from 2.2 to 2.4, but they don't include much about using PerlAddAuthzProvider or PerlAuthenHandler. I have this config section

Re: Perl Authorization handler called before authentication handler

2014-09-14 Thread Lathan Bidwell
On Fri, Sep 12, 2014 at 02:25:49PM -0400, Lathan Bidwell wrote: The documentation for the AuthType field does not seem to give examples for custom auth handlers. The AuthType I put in is the package name that has the auth subroutines in it. This is pulled from other examples

Re: Information on using Apache2::AuthCookie with httpd 2.4

2014-10-21 Thread Lathan Bidwell
On Tue, Oct 21, 2014 at 2:37 AM, Scott Alexander scott.alexan...@humak.fi wrote: Hi, I'm moving from Centos 6 to Centos 7, httpd is 2.4.6 Trying to get Apache2::AuthCookie to work with my module for authentication. Hello Scott, You are not alone. with 2.4, you have to relearn all

Re: mod_perl for Apache 2.4

2015-01-13 Thread Lathan Bidwell
On Tue, Jan 13, 2015 at 1:02 PM, Steve Hay steve.m@googlemail.com wrote: We hope to make a release (2.0.9) very soon. Apologies for the delay in its arrival. Great News! Will there be some updated doc pages with that release? I know I'm having troubles with authentication combined with

Re: How Do I change the Document Root Per Request

2015-03-11 Thread Lathan Bidwell
David, I am not an expert at this, so I don't have an answer. But I can suggest a few debugging steps to clear out of the way: 1) Confirm that your document root is showing properly in the error log Does the error log report /var/html/foo/bar.html is not found, or does it only show the

Re: How Do I change the Document Root Per Request

2015-03-11 Thread Lathan Bidwell
On Wed, Mar 11, 2015 at 1:25 PM, David E. Wheeler da...@justatheory.com wrote: On Mar 11, 2015, at 9:59 AM, David E. Wheeler da...@justatheory.com wrote: # Set the filename. my $file = File::Spec-catfile($sub_root, substr $r-uri, 1); $r-filename($file);

Re: Disallow path info

2015-03-23 Thread Lathan Bidwell
Out of curiosity, Are there links that actually point to / myscript.pl/path/info/... ? Because if you are trying to block them, then it sounds like you don't want to link to them either. Would it be possible to find how they are reaching that page and change the links? Another perspective: If

Re: Apache 2.4: scope of PerlAddAuthzProvider

2015-04-22 Thread Lathan Bidwell
You are correct, the new setup thinks of it as setting up global AuthZ handlers. Make sure to name the provider with a good identifier (i.e.: thisAppUser, GlobalLoginUser, ) A great many people would benefit from updating the documentation on these changes. But I think people are focusing on

Re: mod_perl and apache 2.4

2015-04-16 Thread Lathan Bidwell
I know it doesn't help you, but Debian has been shipping with apache 2.4 and mod_perl working since last year. Of course with Debian, they compile it and stuff it into a package, so we avoid compilation problems. On Thu, Apr 16, 2015 at 10:27 AM, Kevin A. McGrail kmcgr...@pccc.com wrote: On

Re: question on Apache2_4::AuthCookie

2016-04-07 Thread Lathan Bidwell
(:common :http :methods :override :proxy > AUTHZ_GRANTED AUTHZ_DENIED AUTHZ_DENIED_NO_USER); > > I'm not very familiar with require vs use, but could you use a begin block, Apache2::ServerUtil::get_server_version() and then if/else based on the version number? Lathan Bidwell > (That is b

Re: random token re-used in subsequent requests

2016-05-18 Thread Lathan Bidwell
Is it possible that its not a problem of the rand, but a problem of the ||= ? Try debugging the value before you set it. It could be a scoping issue where the old value stays in the variable and then ||= doesn't overwrite it. *Lathan Bidwell* On Wed, May 18, 2016 at 9:08 AM, Vincent Veyron

Re: Recommended Linux distribution for LAMP/mod_perl

2016-10-03 Thread Lathan Bidwell
We went through a bit of an tricky patch when Ubuntu prematurely switched from Apache 2.2 to 2.4 (with major changes needed for mod_perl to work), like 6-12months before it was ready. But otherwise, I have not had any major issues with ubuntu and apache/mod_perl. *Lathan Bidwell*Web Programmer

Re: [Slightly OT] Apache::AuthCookie and mod_perl version 1.x

2017-07-31 Thread Lathan Bidwell
Running it on Apache 2.2 and 2.4, so would be fine for you to discontinue 1.x. Thanks for the good work. *Lathan Bidwell* Web Programmer Division of Integrated Marketing & Communication Andrews University 269-471-6313 *office*www.andrews.edu "Seek Knowledge. Affirm Faith. Change

Re: about request route

2017-08-07 Thread Lathan Bidwell
t; shift(@components), -value => > shift(@components)); > } > } *Lathan Bidwell* Web Programmer Division of Integrated Marketing & Communication Andrews University 269-471-6313 *office*www.andrews.edu "Seek Knowledge. Affirm Faith. Change the Wor