[us...@httpd] Tracing module list and calls

2009-06-16 Thread Markus Moeller
Hi, I am writing two authorizations modules for Apache 2 and have a problem that the second module seems never be called (e.g. authz_2). How can I trace the module stack and how can I debug the decision of apche to run or not to run the module. None of the two modules is authoritative (not sure

[us...@httpd] Authorization module for local user/groups

2009-04-12 Thread Markus Moeller
I am not sure if this already exists, but the attached module checks if the user is a local user or a member of a local group. Local means the user or group getpwnam and getgrnam return (this should honour nsswitch.conf and therfore NIS/ldap users too). Regards Markus mod_authz_group_user.

[us...@httpd] access control using local groups

2009-03-28 Thread Markus Moeller
What would I need to add to httpd.conf or .htaccess to do access control based on users group membership without maintaining an extra group file and with support of nsswitch.conf for ldap groups ? Thank you Markus - The of

[us...@httpd] mod_authnz_ldap question

2009-02-28 Thread Markus Moeller
Has anybody a sample configuration for mod_auth_kerb or mod_auth_gss with mod_authnz_ldap ? I'd like to authenticate the user with GSSAPI/SPNEGO and then authorize with ldap groups. The problem I see in my case is that the username has the realm (e.g. u...@mydomain.com), but my ldap uid does not