I still have a problem while testing req.auth_type(). It looks like the authentication system was changed in Apache 2.2, and that the current test framework does not configure it correctly.
If I understood the new framework correctly, the authentication is handled by three different layers, in which you can select whatever implementation you want.
The first layer is the authentication method, for now you can choose the Basic (mod_auth_basic.c) or the Digest (mod_auth_digest.c) method.
The second layer is the authentication database, which is used to authenticate the credentials provided by the authentication method against a database. There are different mod_authn_* modules for different database storage, for instance mod_authn_file for flat file storage and mod_authn_dbm for DBM file storage.
The last layer is the authorization database, which is used to check whether the given authenticated user may access the request resource. There are different mod_authz_* modules for different database storage, too.
The current problem is that the test suite does not configure correctly the authentication framework. Either I get a 500 error because the authentication database is not properly configured, hence causing the "configuration error: couldn't check access. No groups file?" in the error log, or if I set up properly the authn and authz modules (adding directives to load mod_authn_default and mod_authz_default in test.py line 338) then I get a 401 error because the test users are not in the database.
The best thing I guess would be to disable authentication & authorisation entirely because it seems that Apache 2.2 is hijacking the entire authn/authz process, even when mod_python tries to do it itself.
I tried playing with the AuthBasicAuthoritative directive, even mimicking in test_req_auth_type_conf() the same condition that was put in test_req_requires_conf(). Unfortunately this doesn't lead me anywhere.
What I don't understand is why the problem is only showing on Win32 and Jim's platform. Is it really OK on other platforms ?
Any thoughts on this problem ?
Regards,
Nicolas
2006/4/11, Jim Gallacher <[EMAIL PROTECTED]>:
ben wrote:
> I've been using modpython 3.2.8 + apache 2.2.0 for a while, after
> applying the diffs found here:
>
> http://svn.apache.org/viewcvs.cgi?rev=376544&view=rev
>
> Perhaps Graham or somebody else can suggest that I'm an idiot for
> doing so
No you are not an idiot. :) This is the same diff that has been applied
to branches/3.2.x.
Jim
_______________________________________________
Mod_python mailing list
[EMAIL PROTECTED]
http://mailman.modpython.org/mailman/listinfo/mod_python
