Re: Authentication Nightmare

Mon, 16 Oct 2000 02:53:10 -0700

Hi Asaf
 
I am actually using a .pm file. I call it like this from httpd.conf:
 
<Location /securearea>
 
    order deny,allow
 
    deny from all
 
    ErrorDocument 403 /cgi-bin/accessdenied.cgi
 
</Location>
 
The ErrorDocument then loads a page called logon.html which kicks off my authentication .pm like this
 
<Files logon.html>
 
    AuthName "Relm"
    AuthType Basic
 
    PerlAuthenHandler Auth
 
    require valid-user
 
</Files>
 
I know my pm works but I don't know how to redirect to the requested URL
 
Thank
 
Ian
----- Original Message -----
Sent: Monday, October 16, 2000 4:51 AM
Subject: Re: Authentication Nightmare

Why not use a .pm file that will include an athentication module.. i call mine weblogin.pm
 
in each secure template just add on top something like:
 
=======================
use weblogin;
 
weblogin::authenticate();
=======================
 
this will call the authenticate module to run and if the user failed login it will just display a login screen and exit();
 
good luck! :)
 
asaf
----- Original Message -----
Sent: Monday, October 16, 2000 5:41 PM
Subject: Authentication Nightmare

Can anyone help me with this really irritating problem. I have written a cgi script that is fired up from a ErrorDocument 403 that redirects a user to a logon screen if they attempt to enter a secure area. I then have a perl module that authenticates the entered username and password against a table in an Oracle Database through DBI/DBD.
 
Once I have authenticated the user I need to allow them to view the particular URL the were originally requesting. Getting the URL isn't a problem but redirecting them is.
 
I have asked this question before and the main advise given was to use the cookie based authentication in the Eagle book but the problem is that this has also got to work for WAP phones......
 
Ian Frawley
Software Development
Acquist
[EMAIL PROTECTED]
0161 222 2400

Reply via email to