Some hints to mod_auth_radius-2.0

2004-01-28 Thread Tanel Kokk
We want to implement one-time password based web-server authentication against our Radius server. Mod_auth_radius seems to be quite nice apache(2) module for this purpose. Unfortunately there was some weaknesses: 1) one-time password authentication and initial directory access (problem describe

mod_auth_radius & logout?

2004-01-26 Thread Tanel Kokk
Can I implement somehow a logout mechanism to mod_auth_radius? Just deleting cookie is not a solution, because after that there are any possibility to login again. Only error-pages occure. Tanel - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Problem: apache & mod_auth_radius

2004-01-22 Thread Tanel Kokk
Alan DeKok wrote: "Alan DeKok" <[EMAIL PROTECTED]> wrote: This is explained in the README which comes with the server. I meant "apache module". How could I miss this section from README?! Thanks! Tanel - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Problem: apache & mod_auth_radius

2004-01-21 Thread Tanel Kokk
I'd like to restrict whole my www-server (apache2) resources by radius. Everything is OK restricting subdirectory of www-server (http://myhost.com/info/), but things are worse restricting root-dir of www-server (http://myhost.com). 1) entering http://myhost.com (apache ask for username&password, e