Re: WebDAV HTTP Auth to RADIUS, possible?

2006-09-01 Thread Samuel Degrande

Michael Check wrote:

On 8/31/06, Michael Check [EMAIL PROTECTED] wrote:

WebDAV will allow either Basic or Digest (it uses the same HTTP Auth
mechanism that Apache provides) so I think it will work.  Even with
DAV On, you can have AuthType Basic - so my assumption at this point
is that it will work.  I'll report back to the list.


I'm having difficulty getting Basic authentication done with 
mod_auth_radius


Here is the http conf directives used:

IfModule mod_auth_radius.c

AddRadiusAuth 127.0.0.1:1812 testing123 5:3

AddRadiusCookieValid 5

/IfModule


Location /calendars/

   AllowOverride None
   Options None

   AuthType Basic
   AuthName Calendars
#AuthAuthoritative Off
   AuthRadiusAuthoritative On
   AuthRadiusCookieValid 5
   AuthRadiusActive On
Limit GET HEAD OPTIONS
   require valid-user
   /Limit

   /Location


Our configuration for Apache 1.3 (but it was for https authentication, 
not for WebDAV...) was


AuthAuthoritative on
AuthRadiusAuthoritative on


As far as I remember the order of module declaration was also important. 
We had :


LoadModule access_module libexec/mod_access.so
LoadModule radius_auth_module libexec/mod_auth_radius.so
LoadModule auth_module libexec/mod_auth.so


Hope it will help you

--
Samuel Degrande   LIFL - UMR8022 CNRS - INRIA Futurs - Bat M3
Phone: (33)3.28.77.85.30  USTL - Universite de Lille 1
Fax:   (33)3.28.77.85.37  59655 VILLENEUVE D'ASCQ CEDEX - FRANCE
[CA certs: http://igc.services.cnrs.fr/CNRS-Standard/recherche.html ]


smime.p7s
Description: S/MIME Cryptographic Signature
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: WebDAV HTTP Auth to RADIUS, possible?

2006-08-31 Thread Michael Check

On 8/30/06, Alan DeKok [EMAIL PROTECTED] wrote:

Michael Check [EMAIL PROTECTED] wrote:
 Is it possible to set up an Apache 1.3 server with WebDAV to
 authenticate to a freeRADIUS?

  Unless I'm mistaken, webdav uses HTTP digest for authentication.
That makes it difficult.

  If it's using basic authentication, mod_auth_radius can help.

 We're using freeRadius 1.1.0 on OSX.4, successfully authenticatiing
 off an Active Directory master.

  If it's using HTTP digest authentication, then this is impossible.
HTTP digest requires the clear-text password, and AD doesn't supply it.



Thanks Alan and Samuel.  I d/l the mod-auth_radius and got it
installed.  I haven't successfully gotten it to work, but I haven't
spent enough time yet.  Task for today.

WebDAV will allow either Basic or Digest (it uses the same HTTP Auth
mechanism that Apache provides) so I think it will work.  Even with
DAV On, you can have AuthType Basic - so my assumption at this point
is that it will work.  I'll report back to the list.

Thanks!

Michael Check
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


WebDAV HTTP Auth to RADIUS, possible?

2006-08-29 Thread Michael Check

Is it possible to set up an Apache 1.3 server with WebDAV to
authenticate to a freeRADIUS?

Ideally, I would like to tell the Apache directives to look at
freeRADIUS for authentication using the httpd.conf file.

Has anyone ever done this or able to point me in a direction?  Is it
even possible?

We're using freeRadius 1.1.0 on OSX.4, successfully authenticatiing
off an Active Directory master.

Thanks in advance,

Michael Check
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html