Re: LDAPTrustedMode has the wrong scope...

2005-02-02 Thread Brad Nicholes
You read my mind. I'm all over it. :) Brad >>> Graham Leggett <[EMAIL PROTECTED]> Wednesday, February 02, 2005 12:13:56 PM >>> Brad Nicholes wrote: >I have got something that almost works now. The problem that I am > running into is that util_ldap_connection_find() doesn't know the > diff

Re: LDAPTrustedMode has the wrong scope...

2005-02-02 Thread Graham Leggett
Brad Nicholes wrote: I have got something that almost works now. The problem that I am running into is that util_ldap_connection_find() doesn't know the difference between APR_LDAP_NONE(the secure mode was never set so use the default) vs. APR_LDAP_NONE (NONE is what I really want). Seems like

Re: LDAPTrustedMode has the wrong scope...

2005-02-02 Thread Brad Nicholes
I have got something that almost works now. The problem that I am running into is that util_ldap_connection_find() doesn't know the difference between APR_LDAP_NONE(the secure mode was never set so use the default) vs. APR_LDAP_NONE (NONE is what I really want). Seems like we need another flag

Re: LDAPTrustedMode has the wrong scope...

2005-02-02 Thread Graham Leggett
Brad Nicholes wrote: +1, allowing mod_authnz_ldap to override the default makes a lot more sense. Unless you are already working on a patch, I will try to put something together today. But after today I will be offline for the next two days. I will only have a chance to work on this tomorrow :( R

Re: LDAPTrustedMode has the wrong scope...

2005-02-02 Thread Brad Nicholes
+1, allowing mod_authnz_ldap to override the default makes a lot more sense. Unless you are already working on a patch, I will try to put something together today. But after today I will be offline for the next two days. Brad >>> [EMAIL PROTECTED] Wednesday, February 02, 2005 1:23:51 AM >>> Bra

Re: LDAPTrustedMode has the wrong scope...

2005-02-02 Thread Graham Leggett
Brad Nicholes said: > The attached patches convert LDAPTrustedMode into a per-directory > directive rather than a per-server. This allows the configuration to > specify which mode should be applied for the associated AuthLDAPURL. > > Thoughts on whether this should be the way to go or if LDAPTrus

Re: LDAPTrustedMode has the wrong scope...

2005-02-01 Thread William A. Rowe, Jr.
At 07:07 PM 2/1/2005, Brad Nicholes wrote: >Thoughts on whether this should be the way to go or if LDAPTrustedMode >should be moved up into mod_authnz_ldap as AuthLDAPTrustedMode? Absolutely!!! TrustedMode should always be paired to URL

Re: LDAPTrustedMode has the wrong scope...

2005-02-01 Thread Brad Nicholes
The attached patches convert LDAPTrustedMode into a per-directory directive rather than a per-server. This allows the configuration to specify which mode should be applied for the associated AuthLDAPURL. Thoughts on whether this should be the way to go or if LDAPTrustedMode should be moved up i

LDAPTrustedMode has the wrong scope...

2005-02-01 Thread Brad Nicholes
After testing mod_authnz_ldap and util_ldap some more, it appears that the directive LDAPTrustedMode should be pushed up into mod_authnz_ldap rather than util_ldap and become AuthLDAPTrustedMode. The reason why is because the connection type (ie. NONE, SSL, STARTTLS) is tied to the AuthLDAPUrl