RE: mod_radius, apache2 and the auth cookie.

2005-08-02 Thread Palmer J.D.F.
Hi, Was was pointed out, you'll get authentication dialogs for every gif jpg on the page. This is a BAD idea. The gifs etc are located in an unprotected directory, surely this prevents from having to re-authenticate for each? If I get a failed login, then try to login again it just

Re: mod_radius, apache2 and the auth cookie.

2005-08-02 Thread Kris Benson
FreeRadius users mailing list freeradius-users@lists.freeradius.org on August 2, 2005 at 01:55 -0800 wrote: Hi, Was was pointed out, you'll get authentication dialogs for every gif jpg on the page. This is a BAD idea. The gifs etc are located in an unprotected directory, surely this

Re: mod_radius, apache2 and the auth cookie.

2005-08-02 Thread Alan DeKok
Palmer J.D.F. [EMAIL PROTECTED] wrote: The gifs etc are located in an unprotected directory, surely this prevents from having to re-authenticate for each? Yes. A bit of a dig around reveals this from the Apache site, which implies that all browsers cache the credentials.

RE: mod_radius, apache2 and the auth cookie.

2005-07-28 Thread Palmer J.D.F.
Hi Alan, Palmer J.D.F. [EMAIL PROTECTED] wrote: Is it possible to set the timeout for the auth cookie used by the mod_radius authentication module to 0; by Zero I mean no time, not infinite time? You mean re-authenticate for every request? That would require source code changes.

Re: mod_radius, apache2 and the auth cookie.

2005-07-28 Thread Stefan . Neis
Hi, Palmer J.D.F. schrieb: If I get a failed login, then try to login again it just uses cached credentials and doesn't prompt for details, if I close and re-open the browser it does then allow me to enter details. Sounds like it might be the browser that's caching the bad

Re: mod_radius, apache2 and the auth cookie.

2005-07-28 Thread Alan DeKok
Palmer J.D.F. [EMAIL PROTECTED] wrote: You mean re-authenticate for every request? That would require source code changes. Effectively yes, see the description of what I'm trying to do below. Was was pointed out, you'll get authentication dialogs for every gif jpg on the page. This

Re: mod_radius, apache2 and the auth cookie.

2005-07-27 Thread Alan DeKok
Palmer J.D.F. [EMAIL PROTECTED] wrote: Is it possible to set the timeout for the auth cookie used by the mod_radius authentication module to 0; by Zero I mean no time, not infinite time? You mean re-authenticate for every request? That would require source code changes. Or, is there a way