Re: Hooks question

2009-04-15 Thread Bob Ionescu
2009/4/14 Markus Moeller hua...@moeller.plus.com: Is there a rule when to use ap_hook_check_user_id and when to use ap_hook_auth_checker to register an authentication or authorisation function ? ap_hook_check_user_id is used to check the username/password combination, ap_hook_auth_checker to

Apache logging in prev?

2009-04-15 Thread Michele Waldman
In auth_mod_digest, it looks for previous authentication: while (mainreq-prev != NULL) { mainreq = mainreq-prev; } I'm trying to prevent this in certain cases to allow a new login. If I stop this statement, it uses the new creditials to validate, but this user is not

RE: Apache logging in prev?

2009-04-15 Thread Michele Waldman
./server/util_script.c apr_table_addn(e, REMOTE_USER, r-user); apr_table_addn(e, REDIRECT_REMOTE_USER, back-user); I could this. Is this the right place? Michele -Original Message- From: Michele Waldman [mailto:mmwald...@nyc.rr.com] Sent: Wednesday, April 15,

Re: [PATCH 47021] A new MPM (security) and mod_selinux module

2009-04-15 Thread KaiGai Kohei
I noticed it is implementable as a module for httpd-2.2.x, without mpm support. The following code is a proof-of-concept of the new approach. http://code.google.com/p/sepgsql/source/browse/misc/mod_selinux/mod_selinux.c#312 The selinux_process_connection is a hook of the process_connection

Re: SNI in 2.2.x (Re: Time for 2.2.10?)

2009-04-15 Thread Kaspar Brand
Thanks for your time and review - much appreciated. +n = sslconn-verify_depth; +sslconn-verify_depth = (dc-nVerifyDepth != UNSET) ? +dc-nVerifyDepth : sc-server-auth.verify_depth; +if ((sslconn-verify_depth n) || +((n == 0)

State of Apache::Test?

2009-04-15 Thread Dan Poirier
I'm wondering - what's the state of Apache::Test and httpd/test? Are there active developers using them who understand how they work? Or have they fallen into disuse? Background: I wanted to see if I could write some tests for the new SNI features, so I started looking at Apache::Test.

Re: State of Apache::Test?

2009-04-15 Thread Torsten Foertsch
On Wed 15 Apr 2009, Dan Poirier wrote: I'm wondering - what's the state of Apache::Test and httpd/test?  Are there active developers using them who understand how they work?  Or have they fallen into disuse? Background: I wanted to see if I could write some tests for the new SNI features, so