Re: Authentication and Authorization

2001-09-07 Thread Graham Leggett
Sander Striker wrote: > IMO this should be split. Auth and authz are > completely different things and it would be nice > to have different modules to do authentication > in a different way, but still utilize the same > authorization method. I'm not sure if splitting them will accomplish this t

RE: Authentication and Authorization

2001-09-07 Thread Joshua Slive
> -Original Message- > From: Sander Striker [mailto:[EMAIL PROTECTED]] > I've been going through the modules/aaa directory > and found that modules there seem to implement both > authentication and authorization. > > IMO this should be split. Auth and authz are > completely different t

Re: Authentication and Authorization

2001-09-07 Thread Graham Leggett
Joshua Slive wrote: > Just as a point of information, a relatively frequent request that I hear > from users is to provide group information in an env variable (REMOTE_GROUPS > analagous to REMOTE_USER). This would certainly facilitate that. I am about to add something like this to mod_auth_lda

RE: Authentication and Authorization

2001-09-07 Thread Sander Striker
> Sander Striker wrote: > > > IMO this should be split. Auth and authz are > > completely different things and it would be nice > > to have different modules to do authentication > > in a different way, but still utilize the same > > authorization method. > > I'm not sure if splitting them will

RE: Authentication and Authorization

2001-09-07 Thread Sander Striker
[replying to my own msg] >> Sander Striker wrote: >> >>> IMO this should be split. Auth and authz are >>> completely different things and it would be nice >>> to have different modules to do authentication >>> in a different way, but still utilize the same >>> authorization method. >> >> I'm n

Re: Authentication and Authorization

2001-09-07 Thread Rodent of Unusual Size
Sander Striker wrote: > > I've been going through the modules/aaa directory > and found that modules there seem to implement both > authentication and authorization. Yar, that's a right bugger. I have had a replacement system in my head for a couple of years now, but it requires some substantia

Re: Authentication and Authorization

2001-09-07 Thread William A. Rowe, Jr.
From: "Sander Striker" <[EMAIL PROTECTED]> Sent: Friday, September 07, 2001 6:36 AM > I've been going through the modules/aaa directory > and found that modules there seem to implement both > authentication and authorization. > > IMO this should be split. Auth and authz are > completely differ

Re: Authentication and Authorization

2001-09-09 Thread Graham Leggett
"William A. Rowe, Jr." wrote: > -1 (veto) for 2.0 development. I'd love to see this happen. > Not in the current cycle. I was actually contemplating an entire > split between the authn/authz storage and methods. But that can't > happen in this cycle either if we ever want to get to release. >

Re: Authentication and Authorization

2001-09-09 Thread William A. Rowe, Jr.
.1 branch past its initial GA release, and authn/authz hackers can go a little crazy on the 2.1 branch? Bill - Original Message - From: "Graham Leggett" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, September 09, 2001 8:06 AM Subject: Re: Authenticatio

Re: Authentication and Authorization

2001-09-09 Thread sterling
Hi - IMHO, there is no apache dependency that requires auth and authz to be in the same module usually, it is just logical that the application handle both phases - but that is on the module writer. On Fri, 7 Sep 2001, Sander Striker wrote: > Hi, > > I've been going through the modules/aaa

RE: Authentication and Authorization

2001-09-10 Thread Sander Striker
> From: sterling [mailto:[EMAIL PROTECTED]] > Hi - > > IMHO, there is no apache dependency that requires auth and authz to be in > the same module usually, it is just logical that the application > handle both phases - but that is on the module writer. Yes, but the choice of doing group looku