Authentication

2005-11-10 Thread Martin Moss
All, During the Authentication phase, Any custom responses that need to be sent back to a user, MUST be sent with FORBIDDEN using custom_repsonse? Under Authentication 200 (OK) simply lets Apache Move on the to the next phase (authz, content etc..)... I have an authen handler which uses

Authentication

2006-08-03 Thread Vladimir S. Tikhonjuk
Hi all! I'm thinking about 2 methods of authentication users for my site. May be you'll help me to choose one of them, or advice me something else. The first method: using PerlAuthenHandler on '/' Location. The second method: simple handler, for example http://lo

Mod_Perl Authentication

2004-08-21 Thread Levi E. Stanley
Hi, I have written a authentication module, which seems to work fine but after you put in the correct username and password, it seems to have forgotten to load up any of the files in the DocumentIndex. For example when I type this in the browser http://www.twistedme.com/protected/ I get a Not

proxy authentication

2003-10-05 Thread Jan Algermissen
Hi-- I am implementing a proxy with mod_perl and I need to handle 'normal' authentication for the remote site *and* also authentication for the proxy itself. Is there the same support for proxy authentication in mod_perl as for normal authentication (e.g get_basic_auth_pw() )? H

Authentication problem

2005-04-07 Thread Levi E. Stanley
Hi, Been seeing problems with an Authenticate script lately. It was working fine up to the time I started getting slammed with traffic. I don't see any connection problems in the log file at all. But what I have noticed on the site is, I will click to go to download a file from the secure ar

Re: Authentication

2005-11-10 Thread John ORourke
in the web stats. (when using customer ErrorDocument remember Internet Exploder will only display a custom error doc if its size is >512 bytes) John Martin Moss wrote: All, During the Authentication phase, Any custom responses that need to be sent back to a user, MUST be sent with FOR

Re: Authentication

2005-11-10 Thread Perrin Harkins
On Thu, 2005-11-10 at 16:20 +, John ORourke wrote: > You can avoid some redirection by having a non-HTTPS form which submits > to the HTTPS login page (although users might worry, no padlock icon). > Otherwise it's perfectly reasonable to redirect to a secure login. On > successful login s

Re: Authentication

2005-11-10 Thread Martin Moss
So an Authen Handler can return a REDIRECT? I use a 403 custom repsonse which is a self submitting page (with non javascript handling)... By doing so it prevent's any of the authentication pages appearing in IE's back button on the browser... Marty --- Perrin Harkins <[EM

Re: Authentication

2005-11-10 Thread Perrin Harkins
On Thu, 2005-11-10 at 17:19 +, Martin Moss wrote: > So an Authen Handler can return a REDIRECT? > > I use a 403 custom repsonse which is a self submitting > page (with non javascript handling)... By doing so it > prevent's any of the authentication pages appearing in >

Re: Authentication

2005-11-10 Thread John ORourke
My fault guys, not looking up the numbers - Martin is your admin complaining about too many FORBIDDENs or REDIRECTs? The only thing I can add is that I'd recommend not using the authentication pages/handler to redirect - make yourself an Access phase (eg. "if no valid cookie, r

Re: Authentication

2005-11-10 Thread Martin Moss
You wouldn't believe the problems I've had with AccessHandlers... Although saying that I was trying to do a set_handlers for the contentphase... which was being completely ignored by apache... I'll have a think about it... But the idea is to make the authentication be completely i

Re: Authentication

2005-11-10 Thread John ORourke
e a think about it... But the idea is to make the authentication be completely invisible to the users page request.. so if their login times out, and

Re: Authentication

2005-11-10 Thread John Wittkoski
Martin Moss wrote on 11/10/05, 1:25 PM: > Although saying that I was trying to do a set_handlers > for the contentphase... which was being completely > ignored by apache... Marty, Not sure it's related, but I had what sounds like a similar problem with an authorization handler. I wanted to r

Database Authentication

2006-08-03 Thread Vladimir S. Tikhonjuk
HI all ! I want to make a Database Authentication for my site. I have a PostgreSQL Database. I made a connect_on_init by user 'web_user' to the database. The question is: where better to make site users ? Create them as database users and put into system pg_shadow and pg_group

Re: Authentication

2006-08-03 Thread Sean Davis
On 8/3/06 7:51 AM, "Vladimir S. Tikhonjuk" <[EMAIL PROTECTED]> wrote: > Hi all! > > I'm thinking about 2 methods of authentication users for my site. > May be you'll help me to choose one of them, or advice me something else. > >

Re: Authentication

2006-08-03 Thread Radoslaw Zielinski
Vladimir S. Tikhonjuk <[EMAIL PROTECTED]> [03-08-2006 13:51]: > The second method: simple handler, for example > http://localhost/login, which checks login and password, If everything > is O.K. make session, send cookie with session id. And another handler > which checks every reqest for Cookie

Re: Authentication

2006-08-03 Thread Philip M. Gollucci
Radoslaw Zielinski wrote: > With persistent database connections and prepared statements it doesn't > hurt that much in terms of performance. Just make sure you're not > checking what you don't have to (images, *.css, etc). > Which is why (we) generally suggest that you don't setup handlers on Lo

Re: Authentication

2006-08-03 Thread Jonathan Vanasco
On Aug 3, 2006, at 12:31 PM, Radoslaw Zielinski wrote: Valid: exists, hasn't expired, client's IP matches (ID might have been stolen somehow), etc. I find IP matching to be utterly useless. IPs for dialup/broadband users change like crazy as their ISPs funnel stuff into/out of proxies. my

Re: Authentication

2006-08-04 Thread Radoslaw Zielinski
Jonathan Vanasco <[EMAIL PROTECTED]> [03-08-2006 21:24]: > On Aug 3, 2006, at 12:31 PM, Radoslaw Zielinski wrote: >> Valid: exists, hasn't expired, client's IP matches (ID might have been >> stolen somehow), etc. > I find IP matching to be utterly useless. IPs for dialup/broadband > users change

Re: Authentication

2006-08-04 Thread Issac Goldstand
Not necessarily so. Like Jonathan mentioned, many huge ISPs (like AOL, for example, IIRC) route requests through load balanced transparent proxies. This can cause the same person to appear to browse from a number of different IPs - changing perhaps even more often than Jonathan reported. Issac

Re: Authentication

2006-08-04 Thread Jonathan Vanasco
On Aug 4, 2006, at 8:06 AM, Issac Goldstand wrote: Not necessarily so. Like Jonathan mentioned, many huge ISPs (like AOL, for example, IIRC) route requests through load balanced transparent proxies. This can cause the same person to appear to browse from a number of different IPs - changing

Re: Authentication

2006-08-05 Thread Radoslaw Zielinski
Jonathan Vanasco <[EMAIL PROTECTED]> [04-08-2006 18:07]: [ ... context: storing client's IP in the session and checking if it's the same ] > internally, my ip doesn't change- and lengty connections are fine. > but every new request goes through a different transparent proxy ( > dialup109.aol.com

Re: Authentication

2006-08-05 Thread Jonathan
On Aug 5, 2006, at 6:07 AM, Radoslaw Zielinski wrote: Thanks for explaining, I wasn't aware of cases like this. For some reason, I thought you mean clients on some crazy PPP link which breaks once every few minutes. yeah, its extremely common with ISPs in the US. its also common with busine

Authentication Problem

2007-04-17 Thread Scott Gifford
Hello, I'm having trouble with PerlAuthenHandler. The symptom is that in a browser (Firefox at least), I'm prompted for a password the first time I visit a page. If I enter it incorrectly, I'm not prompted again, but instead just see the error page. The cause seems to be that when mod_perl gets

Authentication handler

2008-12-18 Thread Bruce Johnson
I'm looking at the code at the modperl.com site <http://www.modperl.com/book/chapters/ch6.html > ('Authenticating against a database') as I need to write an authentication handler for our site. This is part of the sample code: # file: Apache/GateKeeper.pm use strict; use

Re: Mod_Perl Authentication

2004-08-21 Thread mpeters
Levi E. Stanley wrote: Hi, I have written a authentication module, which seems to work fine but after you put in the correct username and password, it seems to have forgotten to load up any of the files in the DocumentIndex. For example when I type this in the browser http://www.twistedme.com

Re: Mod_Perl Authentication

2004-08-24 Thread Levi E. Stanley
help, it was greatly appreciated. Best regards, Levi mpeters wrote: Levi E. Stanley wrote: Hi, I have written a authentication module, which seems to work fine but after you put in the correct username and password, it seems to have forgotten to load up any of the files in the DocumentIndex. For

user login ( authentication )

2004-11-01 Thread greger
hello could some kind soul please advice as how to implement rock solid authentication with modperl I have a db app running mod_perl/perl/apache/mysql and need user authentication, should I use the database's authentication or should I write my own ?which is better? ...any advice(help)

DBM authentication configuration

2004-11-02 Thread Hèctor Alòs i Font
I'm trying to migrate from plain file authentication (AuthType Basic) to a DBM type (AuthDBMType). In our system, the only DBM authentication we had was SDBM, but we discovered that we can't use it because in our application a user may belong a quite a lot groups at the same time an

Authentication using https

2004-11-10 Thread Martin Moss
All, I'm about to replace the authentication mechanism that our web site uses. However I wanted to sanity check my thought process. Is it possible to have an Authen handler sitting on certain areas of a site, and if a user isn't logged in (i.e. doesn't have an auth session coo

Authentication and cookies

2011-01-21 Thread Dan Axtell
I'm trying to upgrade mod_perl authentication/authorization handlers for application menu to be more fine-grained by using cookies. The basic idea is - restrict a script alias in httpd.conf with basic authentication calling the custon handlers - validate the user ID/password i

Authorization without Authentication?

2014-08-03 Thread Mark jensen
I have seen this link: http://perl.apache.org/docs/2.0/user/handlers/http.html#PerlAuthzHandler and as it said: This phase requires a successful authentication from the previous phase, because a username is needed in order to decide whether a user is authorized to access the requested resource

authentication with smb

2003-11-04 Thread Tauber, Mathias HDP
hi, I have just subscribed to this mailing list, so I hope I'm doing everything right... my problem: I'm running a reverse proxy with apache 1.3.x and mod_proxy on debian. For the authentication libapache-authensmb is used, so there's a connection to the domain controller pres

Re: Authentication problem

2005-04-07 Thread Martin Moss
Hi, what's your MaxClients setting in your apache conf? It could just be that you aren't running enough apache child processes to serve the number of connections being made, Regards Marty --- "Levi E. Stanley" <[EMAIL PROTECTED]> wrote: > Hi, > > Been seeing problems with an Authenticate scr

Basic Authentication & logout

2005-06-22 Thread Andrea Palmeri
Hy everybody, I'm using Apache to and mod_perl to develop a reverse proxy which authenticates users before forwarding requests to the backend servers.    My question is: how do I logout users which have been authenticated ? (responding to an html link)   I know that using    $r-> note_basic

User Authentication questions

2006-11-26 Thread Patrick Galbraith
st for proof of concept, that takes input from a form value called "op", and redirects "/handlername/" to "/handlername/edit" for instance, if "op" is equal to "edit". That works. So, the next step is to get the username, but _only_ if the user

Re: Authentication Problem

2007-04-17 Thread Scott Gifford
Scott Gifford <[EMAIL PROTECTED]> writes: [...] > The cause seems to be that when mod_perl gets an "Authorization" > header in the request, it doesn't supply a "WWW-Authenticate" header > in the response. Nevermind, found it, the solution was to call: $r->note_basic_auth_failure(); Sco

asynchronous perl authentication!?

2007-06-03 Thread _spitFIRE
Hi All, I have written a simple perl module (using apache authcookie) for authenticating users. However, whenever the user types a wrong password, the entire page refreshes. Is it possible to do a ajax style authentication here??? I'm sorry if my understanding is seriously flawed (I&#x

[OT] Client authentication

2007-09-22 Thread Bill Moseley
This isn't mod_perl related, but I'm hoping someone here has experience in this area and can provide some feedback. Recommendation of a better list for this question is also welcome. I have a mod_perl/SOAP::Lite server application where I need to authenticate the connecting clients. The clients a

Custom authentication (weird)

2007-11-19 Thread Dodger
Heya, I'd like to implement a custom authentication without authentication. Seeing as I don't see anything about what I want to do in the normal auth stuff, I figure I will need to do mod_perl. I can get this all on my own if need be, but if someone else has already invented this wheel

Re: Authentication handler

2008-12-18 Thread André Warnier
Bruce Johnson wrote: I'm looking at the code at the modperl.com site <http://www.modperl.com/book/chapters/ch6.html> ('Authenticating against a database') as I need to write an authentication handler for our site. This is part of the sample code: # file: Apache/GateKeep

Re: Authentication handler

2008-12-18 Thread Bruce Johnson
On Dec 18, 2008, at 3:31 PM, André Warnier wrote: Bruce Johnson wrote: I'm looking at the code at the modperl.com site <http://www.modperl.com/book/chapters/ch6.html > ('Authenticating against a database') as I need to write an authentication handler for our site.

RE: user login ( authentication )

2004-11-01 Thread Clayton Cottingham
Apache::Authcookie Or Apache::Authdbm Work great for me > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > Sent: November 1, 2004 9:40 AM > To: [EMAIL PROTECTED] > Subject: user login ( authentication ) > > hello > could some kin

Re: user login ( authentication )

2004-11-01 Thread Brian Reichert
On Mon, Nov 01, 2004 at 09:40:16AM -0800, [EMAIL PROTECTED] wrote: > hello > could some kind soul please advice as how to implement rock solid > authentication with modperl > I have a db app running mod_perl/perl/apache/mysql and need user > authentication, should I use

Re: user login ( authentication )

2004-11-01 Thread David Nicol
"proscribed?" are you sure? m-w.com says that word means 2 : to condemn or forbid as harmful or unlawful : PROHIBIT > You don't use the database's authentication, per se; the proscribed > mechanism is to create a separate MySQL table for uid/password for > web-based

Re: user login ( authentication )

2004-11-02 Thread Brian Reichert
> > You don't use the database's authentication, per se; the proscribed > > mechanism is to create a separate MySQL table for uid/password for > > web-based authentication. > > > -- > David L Nicol > transportation infrastructure technology contracting sin

Re: Authentication using https

2004-11-10 Thread Michael
> All, > > I'm about to replace the authentication mechanism that > our web site uses. However I wanted to sanity check my > thought process. > > Is it possible to have an Authen handler sitting on > certain areas of a site, and if a user isn't logged in &g

Re: Authentication using https

2004-11-10 Thread John Wittkoski
Michael wrote on 11/10/04, 4:28 PM: > > All, > > > > I'm about to replace the authentication mechanism that > > our web site uses. However I wanted to sanity check my > > thought process. > > > > Is it possible to have an Authen handler si

Re: Authentication using https

2004-11-10 Thread Skylos
ichael <[EMAIL PROTECTED]> wrote: > > All, > > > > I'm about to replace the authentication mechanism that > > our web site uses. However I wanted to sanity check my > > thought process. > > > > Is it possible to have an Authen handler sitting on &

Re: Authentication using https

2004-11-10 Thread Michael J Schout
On Wed, 10 Nov 2004, Skylos wrote: it could go... -> GET content from myserver port 80 <- 403 errordocument login form -> POST credentials to myserver port 443 <- Location http://myserver/content <- Set-Cookie: ticket=gooduser; Domain=myserver; Path=content; -> GET content from myserver port 80 <-

Re: Authentication using https

2004-11-12 Thread Martin Moss
Cheers Fellas, this was the bit I was concerned about. Apache::AuthCookie, looked a little bloated to me, however I'm a big fan of only inventying new types of wheels not old so I'll revisit... Regards Marty --- Michael J Schout <[EMAIL PROTECTED]> wrote: > On Wed, 10 Nov 2004, Skylos wrote:

Re: Authentication using https

2004-11-12 Thread David Nicol
while you're at it you might take a look at the kerberos-like AIS infrastructure, which does not at this time use apache extensions at all but which provides passwordless e-mail-based SSO over an arbitrarily wide domain. -- David L Nicol "It's what God and Dwight Eisenhower intended, and it's w

Re: Authentication and cookies

2011-01-23 Thread André Warnier
t more complicated than that, because Web AAA is quite spaghetti-like in terms of logic. But that, I suppose, you have already found out. Dan Axtell wrote: I'm trying to upgrade mod_perl authentication/authorization handlers for application menu to be more fine-grained by using cookie

Re: Authentication and cookies

2011-01-27 Thread Joe Schaefer
mod_perl list > Sent: Sun, January 23, 2011 3:09:01 PM > Subject: Re: Authentication and cookies > > Hi. > > This is a suggestion to solve what I understand of your problem, but > slightly >differently. > (And I admit that it is because I do not know if you can do

http-authentication on postgresql

2011-03-22 Thread Michel Jansen
Hi There, I have some troubles with the http-authentication using apache2 in combination with postgresql. I used to do it with Apache::AuthenDBI configuring access.conf in the following way: --- AuthName MyDB AuthType Basic PerlAuthenHandler Apache::AuthDBI::authen

Building mod_perl for authentication

2011-10-08 Thread Dan Axtell
2.0.5. However authentication still doesn't work. When I call $r->user in my authenticaion script for a URL that uses basic authentication, I don't get the login pop-up at all, and $r->user returns a value of ' (single quote) when I run make test in mod_perl, the logs sho

Optional authentication / dynamic Require

2013-11-16 Thread Marius Gavrilescu
($r->user && is_admin $r->user) } } } DECLINED } However, apache2 asks for authentication for access to any subdirectory (because of the Require directive), and denies access if the user does not provide valid credentials. One i

Re: Authorization without Authentication?

2014-08-03 Thread André Warnier
Mark jensen wrote: I have seen this link: http://perl.apache.org/docs/2.0/user/handlers/http.html#PerlAuthzHandler and as it said: This phase requires a successful authentication from the previous phase, because a username is needed in order to decide whether a user is authorized to access

RE: Authorization without Authentication?

2014-08-03 Thread Mark jensen
Thanks I guess your answer will work for me if I have only static IPs but what I have suggested is an example, my DB or DNS zone is changing dynamically, can mod_perl deal with them as a DB?

Re: Authorization without Authentication?

2014-08-03 Thread André Warnier
Mark jensen wrote: Thanks I guess your answer will work for me if I have only static IPs but what I have suggested is an example, my DB or DNS zone is changing dynamically, can mod_perl deal with them as a DB? sub Handler { my $r = shift; my $c = $r->connection; my $user = $c->remot

Apache 2.4 Authentication/Authorization

2019-05-15 Thread tomcat
Hi. I am trying to figure out what Apache2::Const return codes /can/ be returned by a mod_perl /authentication/ method under Apache 2.4+, and what consequences each of these return codes has, in terms of what Apache does next. (And also, where to find a commented list of the Apache "A

Re: authentication with smb

2003-11-04 Thread Shannon Eric Peevey
Tauber, Mathias HDP wrote: hi, I have just subscribed to this mailing list, so I hope I'm doing everything right... my problem: I'm running a reverse proxy with apache 1.3.x and mod_proxy on debian. For the authentication libapache-authensmb is used, so there's a connectio

Re: authentication with smb

2003-11-05 Thread cramirez
Mathias HDP wrote: hi, I have just subscribed to this mailing list, so I hope I'm doing everything right... my problem: I'm running a reverse proxy with apache 1.3.x and mod_proxy on debian. For the authentication libapache-authensmb is used, so there's a connection to the domain co

RE: authentication with smb

2003-11-06 Thread Tauber, Mathias HDP
Thanks for the 'patches' to the modules! > 1. Update Authen::Smb like so: > > use Fcntl qw(:flock); > ... > open S, "> /full/path/to/AuthenSmb.lck" or > die "Can't open AuthenSmb.lck: $!\n"; > flock S, LOCK_EX; > my $res = Valid_User($username, $password, $server, $backup, $domain); > close S; W

Re: authentication with smb

2003-11-06 Thread Shannon Eric Peevey
wrote: Tauber, Mathias HDP wrote: hi, I have just subscribed to this mailing list, so I hope I'm doing everything right... my problem: I'm running a reverse proxy with apache 1.3.x and mod_proxy on debian. For the authentication libapache-authensmb is used, so there's a connec

Re: authentication with smb

2003-11-06 Thread Stas Bekman
yo! please trim the quoted text in your replies to the mimimal relevant size. those who need to read the whole thing have the archives. thanks. __ Stas BekmanJAm_pH --> Just Another mod_perl Hacker http://stason.org/

Re: authentication with smb

2003-11-06 Thread Shannon Eric Peevey
Stas Bekman wrote: yo! please trim the quoted text in your replies to the mimimal relevant size. those who need to read the whole thing have the archives. thanks. Will do. speeves cws -- Reporting bugs: http://perl.apache.org/bugs/ Mail list info: http://perl.apache.org/maillist/modperl.html

RE: authentication with smb

2003-11-26 Thread Tauber, Mathias HDP
); > close S; I was given this solution, to fix the problem with multiple authentication requests. I have implemented flocking and now it's running without problems. Because it needs to be very secure, I just wanted to ask how this is working! Isn't this solution unsecure, if some

Re: Basic Authentication & logout

2005-06-22 Thread Chris Croome
Hi On Wed 22-Jun-2005 at 05:15:58PM +0200, Andrea Palmeri wrote: > > My question is: how do I logout users which have been > authenticated ? (responding to an html link) This way of doing it more-or-less works (Opera seems to have problems...): https://wiki.slugbug.org.uk/HTTP_Authentication

Re: Basic Authentication & logout

2005-06-22 Thread Simon Perreault
On Wednesday 22 June 2005 11:15, Andrea Palmeri wrote: > My question is: how do I logout users which have been authenticated ? > (responding to an html link) This is basically impossible. People telling you otherwise are assuming that one browser's quirks are standard.

RE: Basic Authentication & logout

2005-06-22 Thread Adam Prime x443
. Adam -Original Message- From: Simon Perreault [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 22, 2005 12:26 PM To: modperl@perl.apache.org Subject: Re: Basic Authentication & logout On Wednesday 22 June 2005 11:15, Andrea Palmeri wrote: > My question is: how do I logout user

Re: Basic Authentication & logout

2005-06-22 Thread Simon Perreault
On Wednesday 22 June 2005 13:32, Adam Prime x443 wrote: > Ideally, you expire the session on the server (ie, in the DB), rather than > by removing the cookie. > > Common hacks people use to remove cookies are setting the expiry in the > past, or to +1s, or simply to put invalid content into the coo

Re: Basic Authentication & logout

2005-06-24 Thread Dan Wilga
At 5:15 PM +0200 6/22/05, Andrea Palmeri wrote: I invalidate the user authencation and ask credentials once again, but I would like to just to invalidate the user authencation whitout prompting the user for credentials. Can't be done with basic auth. They will always get the "Auth

radius authentication then basic

2005-11-15 Thread Luke Vanderfluit
Hi. I have the following situation: (Modperl1, apache 1.3) I have a number of machines accessing the webserver. Currently I either have them all authenticate through radius or none at all. I have a web application that has it's own authentication mechanism. When I have the r

Re: [OT] Database Authentication

2006-08-03 Thread John ORourke
Not exactly a mod_perl question but I'm sure it's something we've all thought about before... Vladimir S. Tikhonjuk wrote: I want to make a Database Authentication for my site. I have a PostgreSQL Database. I made a connect_on_init by user 'web_user' to the dat

Re: User Authentication questions

2006-11-27 Thread Frank Wiles
ot;op" is equal > to "edit". That works. So, the next step is to get the username, but > _only_ if the user is logged in. > > Currently, I have the main application handler do authentication > simply by checking username and password to the database (md5 hex of > t

Re: User Authentication questions

2006-11-27 Thread Philip M. Gollucci
Frank Wiles wrote: Oh and yes, you can use your own login forms with these. (Custom AAA Handlers) I don't this is a widely known fact, so I'm resending it to emphasize it. It would be nice to mention or emphasize this in the docs -- Hint Hint. -- --

Re: User Authentication questions

2006-11-27 Thread Patrick Galbraith
again, I have an idea in my head how I might implement this, but are there any pre-baked code snippits I could gleen from? Also, with user authentication at this stage, what keeps track of whether a user is logged in or not, and is it on the server or client? Can one set cookies at this stage

Re: User Authentication questions

2006-11-27 Thread Philip M. Gollucci
Patrick Galbraith wrote: ps. I checked out the mod_perl docs from svn, and most of them seem to be pod. What is the nice trick to getting them in html format? http://perl.apache.org/download/docs.html build the site. IF you only want the html version, you can skip most of the prereqs though D

Re: User Authentication questions

2006-11-29 Thread Frank Wiles
On Mon, 27 Nov 2006 16:36:17 -0800 "Philip M. Gollucci" <[EMAIL PROTECTED]> wrote: > Frank Wiles wrote: > >Oh and yes, you can use your own login forms with these. > (Custom AAA Handlers) > > I don't this is a widely known fact, so I'm resending it to emphasize > it. > > It would be nice to

Client certificate based authentication

2007-04-08 Thread Erik Norgaard
arate authentication handler (not authorization as that depends on the action the user wants to do), how to I pass on authentication details to the response handler? Second, my idea is to have one domain name, to authenticate one simply switch to https, the server should request the client certificat

Re: asynchronous perl authentication!?

2007-06-03 Thread Scott Gifford
_spitFIRE <[EMAIL PROTECTED]> writes: > Hi All, > I have written a simple perl module (using apache authcookie) for > authenticating users. However, whenever the user types a wrong password, > the entire page refreshes. Is it possible to do a ajax style authentication > he

Re: asynchronous perl authentication!?

2007-06-03 Thread Perrin Harkins
On 6/3/07, _spitFIRE <[EMAIL PROTECTED]> wrote: I would basically like to stop the entire page getting refreshed and have the normal ajax style login here; is that possible? Not sure what you could consider "normal" here, but there's no reason you can't use any of the popular JavaScript librari

Re: asynchronous perl authentication!?

2007-06-03 Thread Jonathan Vanasco
efreshing, because you're submitting a form and requesting a new page in the main browser window. to keep the page from refreshing, you want to handle that via xmlhttprequest or something similar - where javascript or flash communicates with the server , handles the authentication, and popu

Re: asynchronous perl authentication!?

2007-06-06 Thread Adam Tistler
Even if you use AJAX, the page will still refresh because the AuthCookie module's authentication method redirect's you back to the login page so that the session cookie can be checked. You might be able to get around that by overloading the authentication method using a subrequest in

Re: asynchronous perl authentication!?

2007-06-06 Thread Perrin Harkins
On 6/6/07, Adam Tistler <[EMAIL PROTECTED]> wrote: Even if you use AJAX, the page will still refresh because the AuthCookie module's authentication method redirect's you back to the login page so that the session cookie can be checked. If it's your AJAX request get

Re: asynchronous perl authentication!?

2007-06-07 Thread _spitFIRE
w do I use IFRAME here? Can you give me some more info on that? Or at least a sketch of the implementation? I'm sorry if I'm asking too much. -- View this message in context: http://www.nabble.com/asynchronous-perl-authentication%21--tf3860218.html#a11009532 Sent from the mod_perl - General mailing list archive at Nabble.com.

Re: asynchronous perl authentication!?

2007-06-07 Thread _spitFIRE
Hi Adam, You are perfectly right. However, I'm in dire need of a Ajax style login. Do you have any clue on how to go about implementing the sytem? Adam Tistler wrote: > > Even if you use AJAX, the page will still refresh because the AuthCookie > module's authentication me

Re: asynchronous perl authentication!?

2007-06-07 Thread Jonathan Vanasco
On Jun 7, 2007, at 10:52 AM, _spitFIRE wrote: Hi Adam, You are perfectly right. However, I'm in dire need of a Ajax style login. Do you have any clue on how to go about implementing the sytem? just do an xmlhttprequest to your auth script. have it redirect to a page that prints 0 if the

Re: asynchronous perl authentication!?

2007-06-07 Thread _spitFIRE
e control flow of Apache AuthCookie module and let me know if it can be done! http://search.cpan.org/~mschout/Apache-AuthCookie-3.10/lib/Apache2/AuthCookie.pm -- View this message in context: http://www.nabble.com/asynchronous-perl-authentication%21--tf3860218.html#a11011410 Sent from the mod_per

Re: asynchronous perl authentication!?

2007-06-07 Thread Jonathan Vanasco
On Jun 7, 2007, at 12:23 PM, [EMAIL PROTECTED] wrote: Look at the control flow of Apache AuthCookie module and let me know if it can be done! http://search.cpan.org/~mschout/Apache-AuthCookie-3.10/lib/Apache2/ AuthCookie.pm The control flow shouldn't matter-- if its doing a redirect based o

Re: asynchronous perl authentication!?

2007-06-07 Thread Perrin Harkins
On 6/7/07, _spitFIRE <[EMAIL PROTECTED]> wrote: How do I use IFRAME here? If you Google for information on how to use IFRAMEs, I'm sure you'll find better information than I can give you. The basic idea is that it's a floating frame in part of your page where you put your login form and show t

Re: [OT] Client authentication

2007-09-23 Thread Philippe M. Chiasson
Bill Moseley wrote: > This isn't mod_perl related, but I'm hoping someone here has > experience in this area and can provide some feedback. > Recommendation of a better list for this question is also welcome. > > I have a mod_perl/SOAP::Lite server application where I need to > authenticate the

Re: [OT] Client authentication

2007-09-23 Thread Bill Moseley
On Sun, Sep 23, 2007 at 01:44:44AM -0700, Philippe M. Chiasson wrote: > > > > If the concern is that someone might spoof an IP address then the > > shared secret seems adequate. > > If the secret is ever compromised, you have to update every single > client/server out there. If a client cert is

Re: [OT] Client authentication

2007-09-23 Thread Philippe M. Chiasson
Bill Moseley wrote: > On Sun, Sep 23, 2007 at 01:44:44AM -0700, Philippe M. Chiasson wrote: >> >>> If the concern is that someone might spoof an IP address then the >>> shared secret seems adequate. >> If the secret is ever compromised, you have to update every single >> client/server out there. If

Re: Custom authentication (weird)

2007-11-20 Thread Vegard Vesterheim
On Sun, 18 Nov 2007 10:26:14 -0800 Dodger <[EMAIL PROTECTED]> wrote: > Heya, I'd like to implement a custom authentication without > authentication. Seeing as I don't see anything about what I want to do > in the normal auth stuff, I figure I will need to do mod_perl. >

Re: http-authentication on postgresql

2011-03-22 Thread Dave Hodgkinson
Can you give us a hint as to what the errors are? On 22 Mar 2011, at 15:10, Michel Jansen wrote: > Hi There, > > I have some troubles with the http-authentication using apache2 in > combination with postgresql. I used to do it with Apache::AuthenDBI > configuring access.conf i

Re: http-authentication on postgresql

2011-03-22 Thread Michel Jansen
The Apache::AuthDBI package has changed Checkout the errors below! [Tue Mar 22 16:35:50 2011] [error] [client 192.168.112.1] failed to resolve handler `Apache::AuthDBI::authen': Can't locate Apache/AuthDBI/authen.pm in @INC (@INC contains: /etc/perl /usr/local/lib/perl/5.10.1 /usr/local/sh

Re: http-authentication on postgresql

2011-03-22 Thread Fred Moyer
What version are you using? I'll take a look at this later today if I can find a spare tuit. On Tue, Mar 22, 2011 at 8:37 AM, Michel Jansen wrote: > The Apache::AuthDBI package has changed Checkout the errors below! > > [Tue Mar 22 16:35:50 2011] [error] [client 192.168.112.1] failed to reso

Re: http-authentication on postgresql

2011-03-22 Thread Michel Jansen
Op 22-3-2011 18:59, Fred Moyer schreef: What version are you using? I'll take a look at this later today if I can find a spare tuit. The lastest from cpan!

  1   2   3   >