On Sat, 2002-05-11 at 08:13, Bill Eldridge wrote: > > Is there a way to get APache to use WK for authentication > even for non-WK pages using something like this? > It looks like someone's been working on something > similar here: > > http://mod-auth-script.sourceforge.net/ > > And another at: > http://www.unixpapa.com/mod_auth_external.html
The second one mentions yet another version that supports the authenticator program being queried over a socket -- with the multi-protocol/socket-listening Application of the future, you could hook this up to Webware fairly easily. Otherwise, it might be possible to route a request through Webware, and then have it do an internal redirect to the actual location of the resource. However, this may be insecure -- if you knew what the ultimate destination was you could short circuit the authentication. Unfortunately, I don't think you can do an internal redirect to a resource not available as a normal URL (i.e., just in the filesystem). If you could (and you very possibly can, I don't even really understand what Apache's doing with internal redirects), that would provide a solution as well. > As well as other Apache modules: > http://modules.apache.org/search (search for auth). The problem with the entirely in-Apache method (via mod_auth_whatever), is that it doesn't provide a good way to which documents are visable by who -- they only deal with identifying who's trying to access the document. Of course, it's easier to hook up that part from a dynamic page, all you have to do is throw a 401 as needed (or maybe 403, if they've logged in and still don't have the permission). > Note that Mozilla now supports Digest Authentication. > http://www.mozilla.org/projects/netlib/http/ > http://www.mozilla.org/releases/mozilla0.9.7/#new > > Digest Apache module here: > http://www.berlinonline.de/wissen/computer/linux_tips/os/ > and > http://www.frogdot.org/mod_auth_mda/index.html I don't feel like you can offer both possibilities to the client -- though I don't really know. Ideally, I'd offer both, and if the client supported digest it'd use that, and if not it'd use basic. But there's not nearly enough support for digest to do it exclusively. I dunno. Ian _______________________________________________________________ Have big pipes? SourceForge.net is looking for download mirrors. We supply the hardware. You get the recognition. Email Us: [EMAIL PROTECTED] _______________________________________________ Webware-discuss mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/webware-discuss
