Re: Mod Perl and Basic Authentication

2016-03-12 Thread Matthias Schmitt
Hello, Yes! There is one very magic line in your code, which solved my problem. It is this line: $r->err_headers_out->set("WWW-Authenticate" => 'Basic realm="My Site"’); I always used: $r->headers_out->set("WWW-Authenticate" => 'Basic realm="My Site"’); When digging into the documentation one

Re: Mod Perl and Basic Authentication

2016-03-08 Thread Thomas den Braber
If the resource is not public and the user is not authenticated yet, you can add the 'WWW-Authenticate' http header and return the Apache2::Const::HTTP_UNAUTHORIZED status. This will trigger the browser to show the login dialog. You can also create a cookie and a session table in a database and ch

Re: Mod Perl and Basic Authentication

2016-03-03 Thread Matthias Schmitt
Hello, > On 02 Mar 2016, at 21:26, A. Warnier wrote: > >> $o_Req->note_basic_auth_failure(); >> $o_Req->headers_out->set('WWW-Authenticate' => "Basic"); >> $o_Req->headers_out->set('Realm' => "Login"); > > I believe that the above is supposed to be a single HTTP header, not 2 : > > WWW-Authent

Re: Mod Perl and Basic Authentication

2016-03-02 Thread Vincent Veyron
On Wed, 2 Mar 2016 17:53:39 +0100 Matthias Schmitt wrote: > I am trying to handle basic authentication using mod_perl 2.0.9 and Apache > 2.4.18. > > > BTW, the same Programm runs fine using mod_perl 2.0.6 and Apache 2.2.x. I don't use basic authentication myself so can't help you, but see 'R

Re: Mod Perl and Basic Authentication

2016-03-02 Thread A. Warnier
On 02.03.2016 17:53, Matthias Schmitt wrote: Hello, I am trying to handle basic authentication using mod_perl 2.0.9 and Apache 2.4.18. I am getting the first request to my resource. The user is requesting the URL without any username or password. My program should refuse the access to this r

Mod Perl and Basic Authentication

2016-03-02 Thread Matthias Schmitt
Hello, I am trying to handle basic authentication using mod_perl 2.0.9 and Apache 2.4.18. I am getting the first request to my resource. The user is requesting the URL without any username or password. My program should refuse the access to this resource and force the web browser to offer a d