1
0
mirror of https://github.com/apache/httpd.git synced 2025-11-08 04:22:21 +03:00
Commit Graph

6589 Commits

Author SHA1 Message Date
Stefan Fritsch
f14218c7ad The approach for allowing authorization by user or IP introduced in r956387,
etc. causes problems because the authentication module calls
note_*_auth_failure if authentication fails. This is inappropriate if access is
later allowed because of the IP.

So, instead of calling the auth_checker hook even if authentication failed, we
introduce a new access_checker_ex hook that runs between the access_checker and
the check_user_id hooks. If an access_checker_ex functions returns OK, the
request will be allowed without authentication.

To make use of this, change mod_authz_core to walk the require blocks in the
access_checker_ex phase and deny/allow the request if the authz result does not
depend on an authenticated user. To distinguish a real AUTHZ_DENIED from an
authz provider from an authz provider needing an authenticated user, the latter
must return the new AUTHZ_DENIED_NO_USER code.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@964156 13f79535-47bb-0310-9956-ffa450edef68
2010-07-14 19:59:31 +00:00
Jeff Trawick
a484fd7007 generated docs
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@962961 13f79535-47bb-0310-9956-ffa450edef68
2010-07-11 00:43:35 +00:00
Jeff Trawick
c9d959fa7b fix broken stylesheet path
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@962958 13f79535-47bb-0310-9956-ffa450edef68
2010-07-11 00:34:30 +00:00
Nick Kew
539e6fadd7 Add a note about problem noted in PR 48652
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@960431 13f79535-47bb-0310-9956-ffa450edef68
2010-07-05 03:38:01 +00:00
Rainer Jung
60e8f3a913 Allow to set environment variables using mod_rewrite without
explicitely giving a value.

Most modules only check presence of a variable, not the
value, so it makes sense to make the VAL argument in
the mod_rewrite ENV flag optional.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@960233 13f79535-47bb-0310-9956-ffa450edef68
2010-07-03 16:21:58 +00:00
Rainer Jung
ebcb68896e Fix documented syntax for env var setting in mod_rewrite.
Main page is fine, only the flags guide was wrong.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@960223 13f79535-47bb-0310-9956-ffa450edef68
2010-07-03 14:27:43 +00:00
Nick Kew
042384c3b4 Move new_api_2_4 doc to developer docs where it belongs
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@959136 13f79535-47bb-0310-9956-ffa450edef68
2010-06-29 23:04:27 +00:00
Nick Kew
9ec99270a9 Add cacheing to authn_dbd docs
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@958747 13f79535-47bb-0310-9956-ffa450edef68
2010-06-28 21:23:19 +00:00
Nick Kew
856b869e23 Add note on cacheing to auth howto
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@958741 13f79535-47bb-0310-9956-ffa450edef68
2010-06-28 21:09:44 +00:00
Nick Kew
5b6d760e89 Link to mod_authn_socache in relevant module docs
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@958729 13f79535-47bb-0310-9956-ffa450edef68
2010-06-28 20:57:18 +00:00
Nick Kew
2127db8916 Bah. Fix usage example in r958720
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@958723 13f79535-47bb-0310-9956-ffa450edef68
2010-06-28 20:51:25 +00:00
Nick Kew
bc0c66683e Add usage example in docs
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@958720 13f79535-47bb-0310-9956-ffa450edef68
2010-06-28 20:49:53 +00:00
Nick Kew
f1da46def6 Make a start on documenting mod_authn_socache
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@957958 13f79535-47bb-0310-9956-ffa450edef68
2010-06-25 14:12:16 +00:00
Chris Darroch
d8e9ae6f04 updated notes on ap_hook_check_* wrappers and AP_AUTH_INTERNAL_* flags
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956731 13f79535-47bb-0310-9956-ffa450edef68
2010-06-21 23:19:43 +00:00
Stefan Fritsch
59b049d706 Note auth_checker hook change
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956665 13f79535-47bb-0310-9956-ffa450edef68
2010-06-21 18:59:16 +00:00
Rainer Jung
b9cfff1a23 Remove comment about removal of OS/2 support
from CHANGES and docs.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956524 13f79535-47bb-0310-9956-ffa450edef68
2010-06-21 10:01:06 +00:00
Stefan Fritsch
391797e770 Update transformations
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956407 13f79535-47bb-0310-9956-ffa450edef68
2010-06-20 20:26:02 +00:00
Stefan Fritsch
d3ddf3e01a Fix XML validation issue
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956406 13f79535-47bb-0310-9956-ffa450edef68
2010-06-20 20:21:08 +00:00
Daniel Earl Poirier
371657c647 First pass at documentation for upgrading to 2.4.
Went through CHANGES and tried to pick out things that would
require a 2.2 user to make changes for 2.4.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956396 13f79535-47bb-0310-9956-ffa450edef68
2010-06-20 19:48:13 +00:00
Jeff Trawick
f3ddf96d9b update doc for connection pools
* reduce duplication between initial intro and parameter table
* explain that pools are per-process, and limits are not
  coordinated server-wide
* minor clarifications & readability tweaks


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956059 13f79535-47bb-0310-9956-ffa450edef68
2010-06-18 17:33:47 +00:00
Jim Jagielski
41a6878ac5 xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@955572 13f79535-47bb-0310-9956-ffa450edef68
2010-06-17 12:34:12 +00:00
Igor Galić
80c11dcf59 Fixing minor typo in sections.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@955184 13f79535-47bb-0310-9956-ffa450edef68
2010-06-16 10:27:52 +00:00
Lucien Gentis
67abe949d3 Updates.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@954260 13f79535-47bb-0310-9956-ffa450edef68
2010-06-13 16:54:18 +00:00
Nick Kew
c648dfb480 More linkage
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@954231 13f79535-47bb-0310-9956-ffa450edef68
2010-06-13 14:27:12 +00:00
Nick Kew
e538aae36c Link to new API doc
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@954230 13f79535-47bb-0310-9956-ffa450edef68
2010-06-13 14:18:37 +00:00
Stefan Fritsch
6db8574bc5 some improvements WRT logging
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@954228 13f79535-47bb-0310-9956-ffa450edef68
2010-06-13 14:14:39 +00:00
Nick Kew
77ea946c1d Make a start on documenting API changes in a form we can publish
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@954227 13f79535-47bb-0310-9956-ffa450edef68
2010-06-13 14:04:27 +00:00
Daniel Earl Poirier
c7eb7bf494 spelling
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@952199 13f79535-47bb-0310-9956-ffa450edef68
2010-06-07 12:04:32 +00:00
Rich Bowen
9cdcd0af5c Alternatives to [P].
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@952019 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 23:03:24 +00:00
Rainer Jung
f6cffe53ad Update transformations.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@952015 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 22:30:42 +00:00
Rainer Jung
fcf558c608 Update transformations.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@952014 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 22:29:36 +00:00
Rainer Jung
11b267acd8 Adapt docs to modules now being build dynamically by default.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@952009 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 22:07:37 +00:00
Rich Bowen
17c33d8004 Rebuild recent contributions.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951946 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 20:07:09 +00:00
Stefan Fritsch
1ce02b2c33 Fix typo.
Submitted by: Matt Selsky <selsky columbia edu>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951933 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 19:31:42 +00:00
Stefan Fritsch
5e9890cbb7 Update transformations
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951906 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 17:21:45 +00:00
Stefan Fritsch
53e593a739 add to CHANGES and new_features_2_4
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951905 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 17:12:42 +00:00
Stefan Fritsch
ba0d30294e Replace LogLevelDebugDump with TRACE log levels
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951904 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 17:10:23 +00:00
Stefan Fritsch
a5f4ee1845 Replace RewriteLog/RewriteLogLevel with trace log levels
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951903 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 17:09:43 +00:00
Stefan Fritsch
8f1e26cc21 Replace DumpIOLogLevel with trace log levels
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951902 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 17:08:57 +00:00
Stefan Fritsch
41057afadc Update LogLevel docs
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951901 13f79535-47bb-0310-9956-ffa450edef68
2010-06-06 17:08:09 +00:00
Eric Covener
512be6af6f update compatability from 2.3.7 to 2.3.6
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951114 13f79535-47bb-0310-9956-ffa450edef68
2010-06-03 19:02:05 +00:00
Stefan Fritsch
bc0a04b83e fix xml validation and doc build issues
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951111 13f79535-47bb-0310-9956-ffa450edef68
2010-06-03 18:51:25 +00:00
Joe Orton
3880cb99d4 - clarify wording on handling of empty brigades, see dev@ thread from
msgid <AANLkTimaQNuUnDhhL0yoBJXNWS0c163HUWM9WHZhmFLh@mail.gmail.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@950583 13f79535-47bb-0310-9956-ffa450edef68
2010-06-02 14:53:07 +00:00
Eric Covener
fdcca646fa catch up with xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@950512 13f79535-47bb-0310-9956-ffa450edef68
2010-06-02 11:56:42 +00:00
Eric Covener
8ebb7ac450 add defaults for two nested groups directives
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@950511 13f79535-47bb-0310-9956-ffa450edef68
2010-06-02 11:56:22 +00:00
Eric Covener
a8720fa901 mod_authnz_ldap: Search or Comparison during authorization phase
can use the credentials from the authentication phase
(AuthLDAPSearchAsUSer,AuthLDAPCompareAsUser).
PR 48340 

Submitted by: Domenico Rotiroti, Eric Covener
Reviewed by: Eric Covener



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@950248 13f79535-47bb-0310-9956-ffa450edef68
2010-06-01 21:19:06 +00:00
Eric Covener
1727457dd3 emphasize that trying to use the basic auth credentials directly
is a last resort.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@949444 13f79535-47bb-0310-9956-ffa450edef68
2010-05-29 22:49:17 +00:00
Eric Covener
d15983f1d1 mod_authnz_ldap: Allow the initial DN lookup to bind with a
transformation of the basic auth username.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@949436 13f79535-47bb-0310-9956-ffa450edef68
2010-05-29 20:19:10 +00:00
Eric Covener
27c654fc67 Allow mod_authnz_ldap to set environment variables when it only performs authorization.
AuthLDAPAuthorizePrefix can be used to force this to overlap with the prefix used
for authentication.

PR 45584


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@949336 13f79535-47bb-0310-9956-ffa450edef68
2010-05-29 02:32:22 +00:00
Rich Bowen
b34f14e6ae Several typos fixed.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@949190 13f79535-47bb-0310-9956-ffa450edef68
2010-05-28 14:39:46 +00:00