Stefan Fritsch
f14218c7ad
The approach for allowing authorization by user or IP introduced in r956387,
...
etc. causes problems because the authentication module calls
note_*_auth_failure if authentication fails. This is inappropriate if access is
later allowed because of the IP.
So, instead of calling the auth_checker hook even if authentication failed, we
introduce a new access_checker_ex hook that runs between the access_checker and
the check_user_id hooks. If an access_checker_ex functions returns OK, the
request will be allowed without authentication.
To make use of this, change mod_authz_core to walk the require blocks in the
access_checker_ex phase and deny/allow the request if the authz result does not
depend on an authenticated user. To distinguish a real AUTHZ_DENIED from an
authz provider from an authz provider needing an authenticated user, the latter
must return the new AUTHZ_DENIED_NO_USER code.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@964156 13f79535-47bb-0310-9956-ffa450edef68
2010-07-14 19:59:31 +00:00
Jeff Trawick
a484fd7007
generated docs
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@962961 13f79535-47bb-0310-9956-ffa450edef68
2010-07-11 00:43:35 +00:00
Jeff Trawick
c9d959fa7b
fix broken stylesheet path
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@962958 13f79535-47bb-0310-9956-ffa450edef68
2010-07-11 00:34:30 +00:00
Nick Kew
539e6fadd7
Add a note about problem noted in PR 48652
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@960431 13f79535-47bb-0310-9956-ffa450edef68
2010-07-05 03:38:01 +00:00
Rainer Jung
60e8f3a913
Allow to set environment variables using mod_rewrite without
...
explicitely giving a value.
Most modules only check presence of a variable, not the
value, so it makes sense to make the VAL argument in
the mod_rewrite ENV flag optional.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@960233 13f79535-47bb-0310-9956-ffa450edef68
2010-07-03 16:21:58 +00:00
Rainer Jung
ebcb68896e
Fix documented syntax for env var setting in mod_rewrite.
...
Main page is fine, only the flags guide was wrong.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@960223 13f79535-47bb-0310-9956-ffa450edef68
2010-07-03 14:27:43 +00:00
Nick Kew
042384c3b4
Move new_api_2_4 doc to developer docs where it belongs
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@959136 13f79535-47bb-0310-9956-ffa450edef68
2010-06-29 23:04:27 +00:00
Nick Kew
9ec99270a9
Add cacheing to authn_dbd docs
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@958747 13f79535-47bb-0310-9956-ffa450edef68
2010-06-28 21:23:19 +00:00
Nick Kew
856b869e23
Add note on cacheing to auth howto
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@958741 13f79535-47bb-0310-9956-ffa450edef68
2010-06-28 21:09:44 +00:00
Nick Kew
5b6d760e89
Link to mod_authn_socache in relevant module docs
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@958729 13f79535-47bb-0310-9956-ffa450edef68
2010-06-28 20:57:18 +00:00
Nick Kew
2127db8916
Bah. Fix usage example in r958720
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@958723 13f79535-47bb-0310-9956-ffa450edef68
2010-06-28 20:51:25 +00:00
Nick Kew
bc0c66683e
Add usage example in docs
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@958720 13f79535-47bb-0310-9956-ffa450edef68
2010-06-28 20:49:53 +00:00
Nick Kew
f1da46def6
Make a start on documenting mod_authn_socache
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@957958 13f79535-47bb-0310-9956-ffa450edef68
2010-06-25 14:12:16 +00:00
Chris Darroch
d8e9ae6f04
updated notes on ap_hook_check_* wrappers and AP_AUTH_INTERNAL_* flags
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956731 13f79535-47bb-0310-9956-ffa450edef68
2010-06-21 23:19:43 +00:00
Stefan Fritsch
59b049d706
Note auth_checker hook change
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956665 13f79535-47bb-0310-9956-ffa450edef68
2010-06-21 18:59:16 +00:00
Rainer Jung
b9cfff1a23
Remove comment about removal of OS/2 support
...
from CHANGES and docs.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956524 13f79535-47bb-0310-9956-ffa450edef68
2010-06-21 10:01:06 +00:00
Stefan Fritsch
391797e770
Update transformations
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956407 13f79535-47bb-0310-9956-ffa450edef68
2010-06-20 20:26:02 +00:00
Stefan Fritsch
d3ddf3e01a
Fix XML validation issue
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956406 13f79535-47bb-0310-9956-ffa450edef68
2010-06-20 20:21:08 +00:00
Daniel Earl Poirier
371657c647
First pass at documentation for upgrading to 2.4.
...
Went through CHANGES and tried to pick out things that would
require a 2.2 user to make changes for 2.4.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956396 13f79535-47bb-0310-9956-ffa450edef68
2010-06-20 19:48:13 +00:00
Jeff Trawick
f3ddf96d9b
update doc for connection pools
...
* reduce duplication between initial intro and parameter table
* explain that pools are per-process, and limits are not
coordinated server-wide
* minor clarifications & readability tweaks
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956059 13f79535-47bb-0310-9956-ffa450edef68
2010-06-18 17:33:47 +00:00
Jim Jagielski
41a6878ac5
xforms
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@955572 13f79535-47bb-0310-9956-ffa450edef68
2010-06-17 12:34:12 +00:00
Igor Galić
80c11dcf59
Fixing minor typo in sections.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@955184 13f79535-47bb-0310-9956-ffa450edef68
2010-06-16 10:27:52 +00:00
Lucien Gentis
67abe949d3
Updates.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@954260 13f79535-47bb-0310-9956-ffa450edef68
2010-06-13 16:54:18 +00:00
Nick Kew
c648dfb480
More linkage
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@954231 13f79535-47bb-0310-9956-ffa450edef68
2010-06-13 14:27:12 +00:00
Nick Kew
e538aae36c
Link to new API doc
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@954230 13f79535-47bb-0310-9956-ffa450edef68
2010-06-13 14:18:37 +00:00
Stefan Fritsch
6db8574bc5
some improvements WRT logging
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@954228 13f79535-47bb-0310-9956-ffa450edef68
2010-06-13 14:14:39 +00:00
Nick Kew
77ea946c1d
Make a start on documenting API changes in a form we can publish
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@954227 13f79535-47bb-0310-9956-ffa450edef68
2010-06-13 14:04:27 +00:00
Daniel Earl Poirier
c7eb7bf494
spelling
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@952199 13f79535-47bb-0310-9956-ffa450edef68
2010-06-07 12:04:32 +00:00
Rich Bowen
9cdcd0af5c
Alternatives to [P].
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@952019 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 23:03:24 +00:00
Rainer Jung
f6cffe53ad
Update transformations.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@952015 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 22:30:42 +00:00
Rainer Jung
fcf558c608
Update transformations.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@952014 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 22:29:36 +00:00
Rainer Jung
11b267acd8
Adapt docs to modules now being build dynamically by default.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@952009 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 22:07:37 +00:00
Rich Bowen
17c33d8004
Rebuild recent contributions.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951946 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 20:07:09 +00:00
Stefan Fritsch
1ce02b2c33
Fix typo.
...
Submitted by: Matt Selsky <selsky columbia edu>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951933 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 19:31:42 +00:00
Stefan Fritsch
5e9890cbb7
Update transformations
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951906 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 17:21:45 +00:00
Stefan Fritsch
53e593a739
add to CHANGES and new_features_2_4
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951905 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 17:12:42 +00:00
Stefan Fritsch
ba0d30294e
Replace LogLevelDebugDump with TRACE log levels
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951904 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 17:10:23 +00:00
Stefan Fritsch
a5f4ee1845
Replace RewriteLog/RewriteLogLevel with trace log levels
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951903 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 17:09:43 +00:00
Stefan Fritsch
8f1e26cc21
Replace DumpIOLogLevel with trace log levels
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951902 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 17:08:57 +00:00
Stefan Fritsch
41057afadc
Update LogLevel docs
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951901 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 17:08:09 +00:00
Eric Covener
512be6af6f
update compatability from 2.3.7 to 2.3.6
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951114 13f79535-47bb-0310-9956-ffa450edef68
2010-06-03 19:02:05 +00:00
Stefan Fritsch
bc0a04b83e
fix xml validation and doc build issues
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951111 13f79535-47bb-0310-9956-ffa450edef68
2010-06-03 18:51:25 +00:00
Joe Orton
3880cb99d4
- clarify wording on handling of empty brigades, see dev@ thread from
...
msgid <AANLkTimaQNuUnDhhL0yoBJXNWS0c163HUWM9WHZhmFLh@mail.gmail.com >
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@950583 13f79535-47bb-0310-9956-ffa450edef68
2010-06-02 14:53:07 +00:00
Eric Covener
fdcca646fa
catch up with xforms
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@950512 13f79535-47bb-0310-9956-ffa450edef68
2010-06-02 11:56:42 +00:00
Eric Covener
8ebb7ac450
add defaults for two nested groups directives
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@950511 13f79535-47bb-0310-9956-ffa450edef68
2010-06-02 11:56:22 +00:00
Eric Covener
a8720fa901
mod_authnz_ldap: Search or Comparison during authorization phase
...
can use the credentials from the authentication phase
(AuthLDAPSearchAsUSer,AuthLDAPCompareAsUser).
PR 48340
Submitted by: Domenico Rotiroti, Eric Covener
Reviewed by: Eric Covener
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@950248 13f79535-47bb-0310-9956-ffa450edef68
2010-06-01 21:19:06 +00:00
Eric Covener
1727457dd3
emphasize that trying to use the basic auth credentials directly
...
is a last resort.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@949444 13f79535-47bb-0310-9956-ffa450edef68
2010-05-29 22:49:17 +00:00
Eric Covener
d15983f1d1
mod_authnz_ldap: Allow the initial DN lookup to bind with a
...
transformation of the basic auth username.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@949436 13f79535-47bb-0310-9956-ffa450edef68
2010-05-29 20:19:10 +00:00
Eric Covener
27c654fc67
Allow mod_authnz_ldap to set environment variables when it only performs authorization.
...
AuthLDAPAuthorizePrefix can be used to force this to overlap with the prefix used
for authentication.
PR 45584
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@949336 13f79535-47bb-0310-9956-ffa450edef68
2010-05-29 02:32:22 +00:00
Rich Bowen
b34f14e6ae
Several typos fixed.
...
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@949190 13f79535-47bb-0310-9956-ffa450edef68
2010-05-28 14:39:46 +00:00