Hi,

Thanks for the explanation about the 3 Handlers :) It means that the
first handler who returns OK stop the process since the auth is
successfull ...

About the mechanism, it is working in all case But it makes the WSDL
generation failed : .net web server wsdl are generated on the fly if you
access to the http://url/service.asmx?WSDL

I am really confused about this !!!  As soon I remove the Auth mechanism
from Apache, the WSDL generation is working back !
The only difference I notice is that Content-Type is not correct in the
Header (but I don't even know if it is the cause or the result of the
problem)

I really don't know what could be the problem ...
Nobody faces the same type of behavior ???


Best regards,

Sylvain 

-----Original Message-----
From: Frank Wiles [mailto:[EMAIL PROTECTED] 
Sent: lundi, 8. janvier 2007 20:00
To: Sylvain Perrot
Cc: Modperl Mailing List
Subject: Re: PerlAuthenHandler, PerlAuthzHandler, Reverse Proxy and Web
Services Problem

On Mon, 8 Jan 2007 17:37:54 +0100
"Sylvain Perrot" <[EMAIL PROTECTED]> wrote:

> First, As I am new to modperl development, I would like to validate my

> configuration :) As I understood, PerlAuthenHandler and 
> PerlAuthzHandler are working in parallel, and the first who give back 
> a OK wins ...

   It's not in parallel, it's in order.  PerlAccessHandler, then
   PelrAuthenHandler, then PerlAuthzHandler. 

    The best way to think about it is like this: 

    PerlAccessHandler   ----> is this IP allowed? 
    PerlAuthenHandler  ----> is this username allowed? 
    PerlAuthzHandler    ----> is this group allowed? 
 
> Next, if I try to access to any protectedResource behind the URL 
> http://www.domain.tld/protectedResource/page.aspx, The protection is 
> working fine !
> 
> But, as soon I want to access to a web service (for example, a Flash 
> application which shoud access to WebService in the protected 
> Resources), I've got a problem :
> The security check is correctly done, but the returned content type is

> modified from text/xml to text/html (I checked the HTTP Header using 
> "Live HTTP Headers" in FireFox.
> 
> The problem is that the Web Service WSDL is not returned at all when 
> it is accessed behing a protected area (so, though my perl
> modules) ... But it is working fine when I de-activate the 
> PerlAuthenHandler/PerlAuthzHandler mechanism.
> (this is my problem, since Flash required the access to the WSDL)
> 
> Do you have any idea about my problem ???

   Ok I'm confused, you say it works then it doesn't, but then it 
   does if you turn off your auth? 

   Is the problem that the content type changes or what? 

 ---------------------------------
   Frank Wiles <[EMAIL PROTECTED]>
   http://www.wiles.org
 ---------------------------------

Reply via email to