www/apache
1
0
Fork 0
mirror of https://github.com/apache/httpd.git synced 2026-10-23 22:49:01 +03:00
Code Activity
15,273 Commits 62 Branches 313 Tags
fips-dev
Commit Graph

332 Commits

Author SHA1 Message Date
Paul Querna
df86e987f7 Fix segmentation fault in mod_auth_{basic,digest} when no provider is explicitly listed. 
Reported by: Ben Collins-Sussman <sussman collab.net>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@178674 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-26 20:34:21 +00:00
Bradley Nicholes
0b49d42087 Add mod_authn_alias to the build 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@178054 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-23 23:09:58 +00:00
Bradley Nicholes
556fb599b5 Add the auth provider name as a note in the request so that authn_provider_alias is able to look up the original provider along with the per_dir configuration. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@178052 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-23 23:07:49 +00:00
Bradley Nicholes
79a282df9c authn_provider_alias adds the configuration block tag 
<AuthnProviderAlias baseProvider Alias>
Authentication directives contained within this block can be
referenced as a new authProvider using the AuthBasicProvider or
AuthDigestProvider directives.  These directives will be merged in to
the per_dir configuration just before the base provider is called.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@177985 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-23 17:43:10 +00:00
William A. Rowe Jr
20d06d7a06 Reintroduce stack frame construction with /Oy- (removal was implied by /O2). 
This makes binaries far easier to debug, during operation and for post-crash
  .dmp analysis.  Do not alter /Gs optimizations per brane.

Reviewed by: stoddard, brane

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@170253 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-15 19:11:57 +00:00
Bradley Nicholes
549cf1e255 Backing out the AuthLDAPAllowDNAuth patch from r168016. Because of LDAP filter issues this patch still can't guarantee unique results. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@168644 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-06 19:50:57 +00:00
Bradley Nicholes
3a3447622c Add the directive AuthLDAPAllowDNAuth to allow a user to authenticate against an LDAP directory using a full user DN. This directive allows a user to authenticate against a subcontext that may contain non-unique user IDs. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@168016 13f79535-47bb-0310-9956-ffa450edef68
 2005-05-03 23:07:43 +00:00
Bradley Nicholes
6905d3d9d5 Allow httpd on NetWare to build using either the standard socket libraries or the Winsock libraries. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@161368 13f79535-47bb-0310-9956-ffa450edef68
 2005-04-14 23:42:21 +00:00
Bradley Nicholes
38e8b5da89 Implement the exported function from mod_ldap(util_ldap) as optional functions so that we can eliminate the load ordering of mod_ldap and mod_authnz_ldap. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@159619 13f79535-47bb-0310-9956-ffa450edef68
 2005-03-31 18:44:16 +00:00
André Malo
f5550d2d6a Fix 'Anonymous *', which denied access 
* modules/aaa/mod_authn_anon.c (check_anonymous):
    don't return AUTH_USER_NOT_FOUND if conf->anyuserid is configured.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@153815 13f79535-47bb-0310-9956-ffa450edef68
 2005-02-14 17:55:54 +00:00
Justin Erenkrantz
905cdf9f0b Update copyright year to 2005 and standardize on current copyright owner line. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@151408 13f79535-47bb-0310-9956-ffa450edef68
 2005-02-04 20:28:49 +00:00
Bradley Nicholes
13050b4ff6 Allow AuthLDAPURL to override the default connection type with an option second parameter of NONE, SSL or TLS | STARTTLS 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@151083 13f79535-47bb-0310-9956-ffa450edef68
 2005-02-03 00:03:37 +00:00
William A. Rowe Jr
8aea7cff22 Correct the order of includes to follow httpd conventions, and get 
Win32 compiling again.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@124279 13f79535-47bb-0310-9956-ffa450edef68
 2005-01-05 21:35:51 +00:00
Cliff Woolley
a89bce3fd9 "transfered" is not a word. 
s/transfered/transferred/g;



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@111858 13f79535-47bb-0310-9956-ffa450edef68
 2004-12-14 18:58:25 +00:00
Bradley Nicholes
804ff9ab22 Allow APR to exist and build outside of the httpd/srclib file structure 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@106975 13f79535-47bb-0310-9956-ffa450edef68
 2004-11-30 00:12:39 +00:00
William A. Rowe Jr
2a565eff67 Axe a dead variable 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@106077 13f79535-47bb-0310-9956-ffa450edef68
 2004-11-21 07:18:38 +00:00
Joe Orton
c36ecfa64f Remove the .cvsignore files. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105796 13f79535-47bb-0310-9956-ffa450edef68
 2004-11-19 09:07:29 +00:00
Bradley Nicholes
d688f56f36 Return the correct error when the user object is not found 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105697 13f79535-47bb-0310-9956-ffa450edef68
 2004-11-05 23:41:38 +00:00
Bradley Nicholes
a7eff802d2 Added the directive "Requires ldap-filter" that allows the module to only authorize a user based on a complex LDAP search filter. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105694 13f79535-47bb-0310-9956-ffa450edef68
 2004-11-05 18:48:16 +00:00
Bradley Nicholes
502d1cc8ec Added the directive "Requires ldap-attribute" that allows the module to only authorize a user if the attribute value specified matches the value of the user object. PR 31913 
Submitted by: Ryan Morgan <rmorgan pobox.com>
Reviewd by: Brad Nicholes


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105675 13f79535-47bb-0310-9956-ffa450edef68
 2004-11-03 22:05:25 +00:00
Bradley Nicholes
ce0d3a2f6f Allow mod_authnz_ldap authorization functionality to be used without requiring the user to also be authenticated through mod_authnz_ldap. This allows other authentication modules to take advantage of LDAP authorization only [PR 28253] 
Submitted by: Jari Ahonen [jah progress.com]
Reviewed by: Brad Nicholes


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105669 13f79535-47bb-0310-9956-ffa450edef68
 2004-11-02 00:08:21 +00:00
Joe Orton
5360bc93bc * modules/aaa/mod_authnz_ldap.c: Fix /*-within-comment warning. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105415 13f79535-47bb-0310-9956-ffa450edef68
 2004-10-12 12:27:18 +00:00
Graham Leggett
a2e54fb970 mod_auth_ldap: Handle the inconsistent way in which the MS LDAP 
library handles special characters.
PR:	24437
Obtained from:
Submitted by:	Jess Holle
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105379 13f79535-47bb-0310-9956-ffa450edef68
 2004-10-04 23:43:20 +00:00
William A. Rowe Jr
5e4c2f28c1 Add mod_authnz_ldap for the win32 build 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@104922 13f79535-47bb-0310-9956-ffa450edef68
 2004-08-31 20:34:02 +00:00
Bradley Nicholes
8c9b218b6b Clean up some compiler warnings 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@104727 13f79535-47bb-0310-9956-ffa450edef68
 2004-08-19 18:08:19 +00:00
Bradley Nicholes
211ecf3b51 Update the netware make files to stop building the ldap modules from experimental and start building from the new locations. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@104719 13f79535-47bb-0310-9956-ffa450edef68
 2004-08-18 22:26:58 +00:00
Bradley Nicholes
500074e2f5 Both the r->user and r->ap_auth_type were set previously when the username and password were extracted from the request. Resetting them at the end of the handler will overwrite any changes made by the authn provider. For example, the ldap authn provider can be configured to change the user name to a full user dn. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@104712 13f79535-47bb-0310-9956-ffa450edef68
 2004-08-18 16:28:57 +00:00
Graham Leggett
3acd4eaff8 Make sure mod_authnz_ldap is included in the unix builds. 
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@104707 13f79535-47bb-0310-9956-ffa450edef68
 2004-08-18 13:22:05 +00:00
Graham Leggett
ef72cd4c9d Clarify an error message to tell the user what to do if apr-util lacks 
LDAP support.
PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@104706 13f79535-47bb-0310-9956-ffa450edef68
 2004-08-18 13:15:47 +00:00
Bradley Nicholes
7d188d363c Re-structure the auth_ldap module to fit the new authentication model. The authnz_ldap module provides an ldap authentication provider and an authorization handler. It implements the authorization "require" values ldap-user, ldap-dn and ldap-group. This restructure also moves auth_ldap out of the experimental directory. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@104696 13f79535-47bb-0310-9956-ffa450edef68
 2004-08-17 23:33:07 +00:00
Geoffrey Young
67d4c4decc Allow Digest providers to return AUTH_DENIED to propagate a 401 
status and terminate the provider chain prior to checking the password.
Reviewed by:	justin


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103271 13f79535-47bb-0310-9956-ffa450edef68
 2004-04-05 18:00:15 +00:00
Geoffrey Young
7665ccd497 work around MSIE Digest auth bug - if AuthDigestEnableQueryStringHack 
is set in r->subprocess_env allow mismatched query strings to pass.
PR: 27758


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103096 13f79535-47bb-0310-9956-ffa450edef68
 2004-03-23 13:57:48 +00:00
Geoffrey Young
25c8f1662c minor mod_auth_basic and mod_auth_digest sync. mod_auth_basic 
now populates r->user with the (possibly unauthenticated) user,
and mod_auth_digest returns 500 when a provider returns
AUTH_GENERAL_ERROR
Reviewed by:	justin


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102719 13f79535-47bb-0310-9956-ffa450edef68
 2004-02-21 00:53:18 +00:00
André Malo
a688f06b19 fix name of The Apache Software Foundation 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102618 13f79535-47bb-0310-9956-ffa450edef68
 2004-02-09 20:31:03 +00:00
André Malo
1afeb99711 fix copyright dates according to the first check in 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102550 13f79535-47bb-0310-9956-ffa450edef68
 2004-02-07 19:38:27 +00:00
André Malo
4f02cb1e18 apply Apache License, Version 2.0 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102525 13f79535-47bb-0310-9956-ffa450edef68
 2004-02-06 22:58:42 +00:00
Justin Erenkrantz
87bf129468 Allow mod_auth_digest to work with sub-requests with different methods than 
the original request.

PR: 25040
Submitted by:	Josh Dady <jpd@indecisive.com>
Reviewed by:	Justin Erenkrantz, Sander Striker (concept)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102447 13f79535-47bb-0310-9956-ffa450edef68
 2004-01-29 19:21:13 +00:00
Joe Orton
c4aa600023 Use -export-dynamic only when linking an httpd which includes mod_so, 
not when linking modules or support programs.

* modules/aaa/config.m4, modules/arch/win32/config.m4,
modules/cache/config.m4, modules/echo/config.m4,
modules/filters/config.m4, modules/generators/config5.m4,
modules/metadata/config.m4: Don't add -export-dynamic to LT_LDFLAGS.

* modules/mappers/config9.m4: Add -export-dynamic to HTTPD_LDFLAGS
when mod_so is enabled.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102235 13f79535-47bb-0310-9956-ffa450edef68
 2004-01-08 20:47:29 +00:00
André Malo
fb07607180 update license to 2004. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102135 13f79535-47bb-0310-9956-ffa450edef68
 2004-01-01 13:26:26 +00:00
Justin Erenkrantz
c02dcf4c02 Sync with APR-util deprecated functions. 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101789 13f79535-47bb-0310-9956-ffa450edef68
 2003-11-16 02:22:25 +00:00
André Malo
a4ef421fa7 re-add explaining comment 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101730 13f79535-47bb-0310-9956-ffa450edef68
 2003-11-09 20:05:06 +00:00
André Malo
60f4a2189b allow any user id when configured with 'anonymous *' 
PR: 11428


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101728 13f79535-47bb-0310-9956-ffa450edef68
 2003-11-09 18:21:51 +00:00
André Malo
9583ac39c8 less confusion with identifiers && style 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@101727 13f79535-47bb-0310-9956-ffa450edef68
 2003-11-09 18:02:26 +00:00
André Malo
ce1d7d03e4 strip trailing spaces of groupnames. 
PR:	12863


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100620 13f79535-47bb-0310-9956-ffa450edef68
 2003-07-14 23:23:00 +00:00
Jeff Trawick
805422eb77 get function prototypes for strcasecmp() and strncasecmp() 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99202 13f79535-47bb-0310-9956-ffa450edef68
 2003-04-04 04:02:01 +00:00
William A. Rowe Jr
281948b722 After discussions at length on dev@apr/httpd, it is determined that 
the older .dbg format symbols are not worth the interference with
  generating complete .pdb symbolic debugging databases.

  This patch further eliminates pdbtype:sept flags that interfere with
  deciphering local symbols and type information.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98970 13f79535-47bb-0310-9956-ffa450edef68
 2003-03-11 00:58:59 +00:00
Jeff Trawick
481c8dd845 use APR_CHECK_APR_DEFINE() where possible 
an anomaly noticed before and after this commit:

"--enable-cgi=shared --disable-so" is not recognized as inconsistent


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98946 13f79535-47bb-0310-9956-ffa450edef68
 2003-03-08 13:54:17 +00:00
William A. Rowe Jr
25ac108fe2 After consultations on the APR list, it was decided that /map files are 
fairly redundant when you retain rich .pdb debugging symbol files.  We
  have rarely used them, and generally .dbg and .pdb files prove much more
  useful for the cases we have.

  While eliminating /map files, we are also shrinking the size of the .dbg
  files by stripping 'private' symbol information.  Really this means less
  rich diagnostics from Dr. Watson on NT or Win9x when they query the .dbg
  symbols in creating a DrWatson log file.  But it's more than compensated
  for on newer OS'es where Dr. Watson will query the .pdb symbols, on all
  Win32 flavors when WinDbg is used with the .pdb symbols, and the fact that
  the distribution of binary symbols will use less bandwidth when less
  information is duplicated from the .pdb format into the .dbg files.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98743 13f79535-47bb-0310-9956-ffa450edef68
 2003-02-20 15:56:04 +00:00
William A. Rowe Jr
e8c0a9532f foo.dbgmark turned out to be the same 8.3 name as foo.dbg itself, which 
was badness.  Twist this puppy to .dbr, the only name I could invent that
  doesn't look like any database file extension I recall.

  It stands for .dbg rebased.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98712 13f79535-47bb-0310-9956-ffa450edef68
 2003-02-18 22:07:21 +00:00
André Malo
a3a4b01dc1 drop the guess_domain function. 
Our docs say about AuthDigestDomain:
This directive should always be specified and contain at least the (set of)
root URI(s) for this space. Omitting to do so will cause the client to send
the Authorization header for every request sent to this server.

guessing the parameter is somewhat bogus. guess_domain() also resulted sometimes
in relative URIs, non-URI strings or empty strings, which caused a lot of
problems.
According to the docs, the domain parameter will be omitted now,
if not specified. This is exactly, what one would expect.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@98636 13f79535-47bb-0310-9956-ffa450edef68
 2003-02-13 02:28:57 +00:00