HTTP Streaming with Apache 1

2010-03-01 Thread Alexander Farber
Hello, I have a game, a daemon listening at port 8080 for TCP clients. The clients send auth. details with each their message and I keep the state, so the TCP-connection can be interrupted and then reconnected and the game will still continue. To support players behind corporate firewalls :-) I'v

Time for a new AuthType: "cert?"

2010-03-01 Thread Thomas, Peter
I have been trying for some time to come up with a generalizable solution from the "stock" mod_authnz_ldap that works in a environment with X.509 certificate-based authentication and LDAP-based authorization. Unfortunately, mod_authnz_ldap was written in such a way that it seems extremely difficul

Re: Time for a new AuthType: "cert?"

2010-03-01 Thread Eric Covener
>   1) for authentication:  depend upon mod_ssl configured with an appropriate > SSLVerifyClient option.  [i.e. decline to authenticate a user if no client > cert was passed; be configurable to fail or warn stridently if a client cert > was passed but "SSLVerifyClient optional_no_ca" is in use] Wi

RE: Time for a new AuthType: "cert?"

2010-03-01 Thread Thomas, Peter
> -Original Message- > From: Eric Covener [mailto:cove...@gmail.com] > > From: Pete Thomas [ptho...@hpti.com] > >   1) for authentication:  depend upon mod_ssl configured with an > > appropriate SSLVerifyClient option. > > [i.e. decline to authenticate a user if no client cert was pass

rewrite processing before cache

2010-03-01 Thread Anthony J. Biacco
I asked a vaguely similar question about a year ago, but this one is a little more simplistic in comparison. Running 2.2.14 on linux, disk caching a servlet's output, not ignoring query string as that can change the output, and not using cacheignoreheaders. My problem is, using rewrite rules on s

Re: rewrite processing before cache

2010-03-01 Thread Eric Covener
On Mon, Mar 1, 2010 at 8:36 PM, Anthony J. Biacco wrote: > I asked a vaguely similar question about a year ago, but this one is a > little more simplistic in comparison. > > Running 2.2.14 on linux, disk caching a servlet's output, not ignoring > query string as that can change the output, and not

Re: Time for a new AuthType: "cert?"

2010-03-01 Thread Arturo 'Buanzo' Busleiman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Thomas, Peter wrote: >> From: Eric Covener [mailto:cove...@gmail.com] >> I think "AuthType cert" is reasonable as long as you can demonstrate using >> the the traditional authz providers. > > Agreed. I'll think about what test cases are appropriat

RE: rewrite processing before cache

2010-03-01 Thread Anthony J. Biacco
Good to know about that trunk feature. I'll have to remember that when it gets around to stable. The vary thing i might try. I'll have to weigh cost versus functionality. Thanx very much. -Tony Sent from my Windows® phone. -Original Message- From: Eric Covener Sent: Monday, March 01,