<feed xmlns='http://www.w3.org/2005/Atom'>
<title>delta/apache/httpd.git/include/mod_auth.h, branch httpdunit</title>
<subtitle>github.com: apache/httpd.git
</subtitle>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/apache/httpd.git/'/>
<entry>
<title>Restore support for the AUTH_HANDLED return code in AUTHN providers,</title>
<updated>2013-07-03T12:13:50+00:00</updated>
<author>
<name>Eric Covener</name>
<email>covener@apache.org</email>
</author>
<published>2013-07-03T12:13:50+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/apache/httpd.git/commit/?id=7fbc93eac7f9af34b52ced5c824867e211d01ef6'/>
<id>7fbc93eac7f9af34b52ced5c824867e211d01ef6</id>
<content type='text'>
like in 2.2, which allows authn provider to return their own status
in r-&gt;status (custom error code, or return a redirect)



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1499351 13f79535-47bb-0310-9956-ffa450edef68
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
like in 2.2, which allows authn provider to return their own status
in r-&gt;status (custom error code, or return a redirect)



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1499351 13f79535-47bb-0310-9956-ffa450edef68
</pre>
</div>
</content>
</entry>
<entry>
<title>Remove trailing comma on last enum member for authz_status</title>
<updated>2011-09-30T03:55:42+00:00</updated>
<author>
<name>Paul Querna</name>
<email>pquerna@apache.org</email>
</author>
<published>2011-09-30T03:55:42+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/apache/httpd.git/commit/?id=3bc7336e01c692d50914b7324122d89c89e10b44'/>
<id>3bc7336e01c692d50914b7324122d89c89e10b44</id>
<content type='text'>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1177497 13f79535-47bb-0310-9956-ffa450edef68
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1177497 13f79535-47bb-0310-9956-ffa450edef68
</pre>
</div>
</content>
</entry>
<entry>
<title>Allow authz providers to check args while reading the config and allow</title>
<updated>2010-09-19T17:55:47+00:00</updated>
<author>
<name>Stefan Fritsch</name>
<email>sf@apache.org</email>
</author>
<published>2010-09-19T17:55:47+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/apache/httpd.git/commit/?id=1008c272602551d6fef0d05e6f214c66f51de5c7'/>
<id>1008c272602551d6fef0d05e6f214c66f51de5c7</id>
<content type='text'>
them to cache parsed args.

Use this to check that argument to 'all' provider is 'granted' or 'denied'.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@998706 13f79535-47bb-0310-9956-ffa450edef68
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
them to cache parsed args.

Use this to check that argument to 'all' provider is 'granted' or 'denied'.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@998706 13f79535-47bb-0310-9956-ffa450edef68
</pre>
</div>
</content>
</entry>
<entry>
<title>The approach for allowing authorization by user or IP introduced in r956387,</title>
<updated>2010-07-14T19:59:31+00:00</updated>
<author>
<name>Stefan Fritsch</name>
<email>sf@apache.org</email>
</author>
<published>2010-07-14T19:59:31+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/apache/httpd.git/commit/?id=f14218c7ad848377d62b7c24240832b67794eafd'/>
<id>f14218c7ad848377d62b7c24240832b67794eafd</id>
<content type='text'>
etc. causes problems because the authentication module calls
note_*_auth_failure if authentication fails. This is inappropriate if access is
later allowed because of the IP.

So, instead of calling the auth_checker hook even if authentication failed, we
introduce a new access_checker_ex hook that runs between the access_checker and
the check_user_id hooks. If an access_checker_ex functions returns OK, the
request will be allowed without authentication.

To make use of this, change mod_authz_core to walk the require blocks in the
access_checker_ex phase and deny/allow the request if the authz result does not
depend on an authenticated user. To distinguish a real AUTHZ_DENIED from an
authz provider from an authz provider needing an authenticated user, the latter
must return the new AUTHZ_DENIED_NO_USER code.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@964156 13f79535-47bb-0310-9956-ffa450edef68
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
etc. causes problems because the authentication module calls
note_*_auth_failure if authentication fails. This is inappropriate if access is
later allowed because of the IP.

So, instead of calling the auth_checker hook even if authentication failed, we
introduce a new access_checker_ex hook that runs between the access_checker and
the check_user_id hooks. If an access_checker_ex functions returns OK, the
request will be allowed without authentication.

To make use of this, change mod_authz_core to walk the require blocks in the
access_checker_ex phase and deny/allow the request if the authz result does not
depend on an authenticated user. To distinguish a real AUTHZ_DENIED from an
authz provider from an authz provider needing an authenticated user, the latter
must return the new AUTHZ_DENIED_NO_USER code.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@964156 13f79535-47bb-0310-9956-ffa450edef68
</pre>
</div>
</content>
</entry>
<entry>
<title>New module: mod_authn_cache</title>
<updated>2010-06-22T18:16:16+00:00</updated>
<author>
<name>Nick Kew</name>
<email>niq@apache.org</email>
</author>
<published>2010-06-22T18:16:16+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/apache/httpd.git/commit/?id=2ecd34c26d2d26e754374e46ac9e09591891172f'/>
<id>2ecd34c26d2d26e754374e46ac9e09591891172f</id>
<content type='text'>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956966 13f79535-47bb-0310-9956-ffa450edef68
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956966 13f79535-47bb-0310-9956-ffa450edef68
</pre>
</div>
</content>
</entry>
<entry>
<title>add a standard AUTHZ_PREFIX for, no MMN bump since it's just baked in if you </title>
<updated>2010-05-29T02:20:24+00:00</updated>
<author>
<name>Eric Covener</name>
<email>covener@apache.org</email>
</author>
<published>2010-05-29T02:20:24+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/apache/httpd.git/commit/?id=d38b48fe7172f9762001ba224be461bbcb61b4c2'/>
<id>d38b48fe7172f9762001ba224be461bbcb61b4c2</id>
<content type='text'>
build against it.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@949335 13f79535-47bb-0310-9956-ffa450edef68
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
build against it.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@949335 13f79535-47bb-0310-9956-ffa450edef68
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix handling of authz configurations, make default authz logic replicate</title>
<updated>2008-11-02T04:01:32+00:00</updated>
<author>
<name>Chris Darroch</name>
<email>chrisd@apache.org</email>
</author>
<published>2008-11-02T04:01:32+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/apache/httpd.git/commit/?id=fa0fdfa2fca6dd63cd787106b209b1415c8eb1b8'/>
<id>fa0fdfa2fca6dd63cd787106b209b1415c8eb1b8</id>
<content type='text'>
2.2.x authz logic and support existing configurations (including .htaccess
files), and replace &lt;Satisfy*&gt;, Reject, and AuthzMergeRules directives
with Match, &lt;Match*&gt;, and AuthzMerge directives.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@709838 13f79535-47bb-0310-9956-ffa450edef68
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
2.2.x authz logic and support existing configurations (including .htaccess
files), and replace &lt;Satisfy*&gt;, Reject, and AuthzMergeRules directives
with Match, &lt;Match*&gt;, and AuthzMerge directives.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@709838 13f79535-47bb-0310-9956-ffa450edef68
</pre>
</div>
</content>
</entry>
<entry>
<title>remove unused AUTHZ_GROUP_NOTE define</title>
<updated>2008-11-01T15:01:35+00:00</updated>
<author>
<name>Chris Darroch</name>
<email>chrisd@apache.org</email>
</author>
<published>2008-11-01T15:01:35+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/apache/httpd.git/commit/?id=6200ffa41e464f044c8c1973f3fda1bfc8172d95'/>
<id>6200ffa41e464f044c8c1973f3fda1bfc8172d95</id>
<content type='text'>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@709708 13f79535-47bb-0310-9956-ffa450edef68
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@709708 13f79535-47bb-0310-9956-ffa450edef68
</pre>
</div>
</content>
</entry>
<entry>
<title>fix typo</title>
<updated>2008-11-01T14:53:09+00:00</updated>
<author>
<name>Chris Darroch</name>
<email>chrisd@apache.org</email>
</author>
<published>2008-11-01T14:53:09+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/apache/httpd.git/commit/?id=cc8a3547ca8249f127b8921f3537206481fd204a'/>
<id>cc8a3547ca8249f127b8921f3537206481fd204a</id>
<content type='text'>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@709706 13f79535-47bb-0310-9956-ffa450edef68
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@709706 13f79535-47bb-0310-9956-ffa450edef68
</pre>
</div>
</content>
</entry>
<entry>
<title>* include/mod_auth.h</title>
<updated>2008-10-29T08:25:58+00:00</updated>
<author>
<name>Paul Querna</name>
<email>pquerna@apache.org</email>
</author>
<published>2008-10-29T08:25:58+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/apache/httpd.git/commit/?id=e51cb1a4edce609bee47518877687f881665ad6f'/>
<id>e51cb1a4edce609bee47518877687f881665ad6f</id>
<content type='text'>
  (authz_status): Remove trailing comma on enum.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@708822 13f79535-47bb-0310-9956-ffa450edef68
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
  (authz_status): Remove trailing comma on enum.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@708822 13f79535-47bb-0310-9956-ffa450edef68
</pre>
</div>
</content>
</entry>
</feed>
