Fletcher Cocquyt <[email protected]> writes: > Thanks Russ, works as advertised and tested by DEV team.
> Now we are faced with upgrading prod webauth from 3.6.2 in prod to use > this directive. > What version would you recommend to minimize issues? 4.4.1 (just released) is the same as 4.4.0 for mod_webauth and got a pretty good round of testing, but it's not yet that widely deployed. It would probably be fine, but if you want to be extra-safe, the www.stanford.edu servers are running 4.3.2. (4.3.3 is the same as 4.3.2 but with some additional bug fixes for WebLogin code.) Either would get you multifactor support and Apache 2.4 support. If now is a bad time to do a major upgrade, 3.7.3 was quite stable and was rather close to what you're running. (3.7.4 wasn't used for as long, but should also be fine and adds WebAuthOptional.) -- Russ Allbery <[email protected]> Technical Lead, ITS Infrastructure Delivery Group, Stanford University
