Re: [users@httpd] [mod_lua] Successful arbitrary authentication with denied access on the resource results in a core:error AH00571 message in the logs about a missing AuthType

> Lots of things could be better. To me it is clear that the overall > system expects an AuthType to be set if you will be doing authn and > authz. Thx for clarification - this was at least not clear to me. > > The error message is one indication of that But it appears only if the

Re: [users@httpd] [mod_lua] Successful arbitrary authentication with denied access on the resource results in a core:error AH00571 message in the logs about a missing AuthType

On Thu, Mar 15, 2018 at 10:50 AM, Torsten Krah wrote: > Am Donnerstag, den 15.03.2018, 10:44 -0400 schrieb Eric Covener: >> I think you should be setting it to a customized string or an existing >> one if you want a fallthrough behavior. Anything else seems >>

Re: [users@httpd] [mod_lua] Successful arbitrary authentication with denied access on the resource results in a core:error AH00571 message in the logs about a missing AuthType

Am Donnerstag, den 15.03.2018, 10:44 -0400 schrieb Eric Covener: > I think you should be setting it to a customized string or an existing > one if you want a fallthrough behavior. Anything else seems > undefined/dangerous. lua docs does not tell that i should set AuthType anywhere searching for

Re: [users@httpd] [mod_lua] Successful arbitrary authentication with denied access on the resource results in a core:error AH00571 message in the logs about a missing AuthType

> I've implemented neither None, Basic, Digest or Form - so i did not set that > on purpose, i just used the LuaHookCheckUserID directive to implement my > arbitrary authentication hook - so its more something like AuthType == CUSTOM. I think you should be setting it to a customized string or

[users@httpd] [mod_lua] Successful arbitrary authentication with denied access on the resource results in a core:error AH00571 message in the logs about a missing AuthType

I am using an arbitrary authentication with mod_lua which works so far. Authentication is done via mod_lua: https://httpd.apache.org/docs/2.4/de/mod/mod_lua.html#luahookcheckuserid Authorization is done via mod_authz_svn. I did that and set r.user = 'foo' to the request - just always the same