Re: Witango-Talk: Witango, Apache and Authentication

[John McGowan]

I'd check your .htaccess file  it doesn't sound like it's setup properly 
to me.  That is if you have the .htaccess file setup to block access to 
the TAF, you shouldn't have to put any logic into the taf to protect it. 

/John

John Zak wrote:

Hello,

I'm running Witango 5 on an OSX box with Apache 1.3.  I've got an 
external authentication mechanism (mod_pubcookie WebISO) that I'm 
using with a .htaccess file to control access to some directories.

When I link directly to a .taf file, it executes without 
authenticating the user.  Therefore, the first thing I have to do in 
the .taf is check for a CGI variable that would indicate the user is 
authenticated.  When that's not found, I've been redirecting the user 
to a .html file.  When the html file is served, the webserver 
processes the authentication.  Upon successful authentication, it then 
passes along the html file, which is a redirect back to the .taf 
file.  Once the user gets back to the .taf file, the CGI variable 
exists and authenticated users then see the rest of the application.

My question is: is there a better way of doing that?  I think it's a 
webserver (httpd.conf) problem moreso than Witango, but I figured I'd 
ask here first.

Thanks,
John
________________________________________________________________________
TO UNSUBSCRIBE: Go to http://www.witango.com/maillist.taf
________________________________________________________________________
TO UNSUBSCRIBE: Go to http://www.witango.com/maillist.taf