Re: [a bit OT] AuthCookieDBI and Apache 2.4

2019-02-21 Thread tomcat
On 21.02.2019 00:01, Paul B. Henson wrote: On Wed, Feb 20, 2019 at 05:56:48PM -0500, Edward J. Sabol wrote: Any pointers to a working AuthzProvider written in Perl (like for the "species" one) in your examples? It's not perfectly clear to me how to go about that. I wrote one for CAS auth a wh

Re: AuthCookieDBI and Apache 2.4

2019-02-21 Thread Vegard Vesterheim
On Wed, 20 Feb 2019 10:28:35 -0600 Michael Schout wrote: > On 2/12/19 1:25 PM, Edward J. Sabol wrote: >> I know AuthCookie has been updated by the magnificient Michael Schout to > > Thanks for the kind compliments Ed :). > > As for AuthCookieDBI, you may not even need to change it to use > Apache

Re: [a bit OT] AuthCookieDBI and Apache 2.4

2019-02-21 Thread Michael Schout
On 2/21/19 3:41 AM, André Warnier (tomcat) wrote: > 1) the "authz" function is now called *first* (before any authentication > module has been called - even non-perl add-on ones), > and > 2) it *can* be called 2 or more times during the same request cycle > and Yes, and this allows you to do "Ano

Re: [a bit OT] AuthCookieDBI and Apache 2.4

2019-02-21 Thread Paul B. Henson
On 2/21/2019 9:46 AM, Michael Schout wrote: Another common thing I've seen people do is return an invalid Apache2::Const value from an Authz provider. You must return one of a Yup, been there done that :). I pieced this together, if my memory is correct, from apache mailing list posts, as w

Re: AuthCookieDBI and Apache 2.4

2019-02-21 Thread Edward J. Sabol
On Feb 21, 2019, at 5:22 AM, Vegard Vesterheim wrote: > I registered a ticket against Apache2-AuthCookieDBI regarding this issue > a long time ago: > > https://rt.cpan.org/Public/Bug/Display.html?id=106663 > > We do not use this any longer. But, given that the ticket is still open, > I wonder i