Changes in mod_authn_core.xml http://src.iws.cs.ovgu.de/source/rss/httpd/docs/manual/mod/mod_authn_core.xml en Copyright 2005 Java Fix doc as spotted by Falco Schwarz in online doc /httpd/docs/manual/mod/mod_authn_core.xml - 03d0bb2f3f4b6d3ac6d13eb240259c6e3c2724e5 jailletc36 Simply remove trailing whitespace. /httpd/docs/manual/mod/mod_authn_core.xml - a99c5d4cc3cab6a62b04d52000dbc22ce1fa2d94 coar Following up on BZ 53530.. putting quotation marks around arbitrary-text, complex, and/or filesystem directive arguments. More to do.. /httpd/docs/manual/mod/mod_authn_core.xml - 3658293f56f1683ca41e3bc5b70d98b203d8004b coar mod_authn_core: Add expression support to AuthName and AuthType. /httpd/docs/manual/mod/mod_authn_core.xml - d58a848a016d401b965111e50ef829e1641f7834 minfrin two commenters were confused authnprovideralias providing special config to authz providers /httpd/docs/manual/mod/mod_authn_core.xml - 811cb87626640c454e98542d7c6b3738f0556840 covener add a warning in the LDAP AuthnProviderAlias and expecting to have a configured LDAP authorization provider. /httpd/docs/manual/mod/mod_authn_core.xml - be5569b0e4d790c51d8523e5920fd5060ffde6ee covener Fix up examples /httpd/docs/manual/mod/mod_authn_core.xml - 1116ef1b391cabf18f2b6e310a035096f2d86740 humbedooh Syntax for mod_a*.xml and MPMs /httpd/docs/manual/mod/mod_authn_core.xml - 6f10385908fbdfd4849e4bc50e690ee54c62f2cd humbedooh Cleanup effort in prep for GA push: Trim trailing whitespace... no func change /httpd/docs/manual/mod/mod_authn_core.xml - 860b4efe27e7c1c9a2bf5c872b29c90f76849b51 jim Adds a mod_authn_file example to the AuthProviderAlias docs, since more people understand mod_authn_file than understand LDAP. /httpd/docs/manual/mod/mod_authn_core.xml - bb37893866942b9e73f6a842311eb1b61fa8bdca rbowen Style correction /httpd/docs/manual/mod/mod_authn_core.xml - c680d69328790f4c47a8f42d2e3945fce4b712f7 lgentis Add AuthType of None to support disabling authentication. Prevent crash when provider alias created to provider which is not yet registered. Migrate remaining functionality of mod_authn_default to mod_authn_core. /httpd/docs/manual/mod/mod_authn_core.xml - ce6098001014d149e90e56ab0e89c1b4aab30136 chrisd Pet peeve: fix capitalisation of 'Require' directive /httpd/docs/manual/mod/mod_authn_core.xml - 5140e49bf921295ad107d1a161d7e276eb3a209b noodl Update the example and fix typos /httpd/docs/manual/mod/mod_authn_core.xml - 8fd572cca68670bef3948b603518523d2d9ab01a bnicholes Remove the "virtual host" context for the AuthnProviderAlias directive in the documentation Submitted by: Vicent Bray < noodlet gmail com > /httpd/docs/manual/mod/mod_authn_core.xml - 8cb03e4ba8f5fe7a9f69d254af2b14f33eda70e2 bnicholes update license header text /httpd/docs/manual/mod/mod_authn_core.xml - db479b48bd4d75423ed4a45e15b75089d1a8ad72 fielding Update the copyright year in all .c, .h and .xml files /httpd/docs/manual/mod/mod_authn_core.xml - 3d81f57512275ca06a60a9bcbd23c1f8b429fdf2 colm Move the AuthnProviderAlias documentation into mod_authn_core since that is now where the directive lives /httpd/docs/manual/mod/mod_authn_core.xml - eb5dc86f8a44b4571adfb11b831dd09a2721f159 bnicholes Fix properties, add missing transformed files and update transformation /httpd/docs/manual/mod/mod_authn_core.xml - ffb88a4885747797937e30a5ac8b1606da3cb4ad nd Authz refactoring Merge from branches/authz-dev Basically here is a list of what has been done: - Convert all of the authz modules from hook based to provider based - Remove the ap_requires field from the core_dir_config structure - Remove the function ap_requires() since its functionality is no longer supported or necessary in the refactoring - Remove the calls to ap_some_auth_required() in the core request handling to allow the hooks to be called in all cases. - Add the new module mod_authz_core which will act as the authorization provider vector and contain common authz directives such as 'Require', 'Reject' and '<RequireAlias>' - Add the new module mod_authn_core which will contain common authentication directives such as 'AuthType', 'AuthName' and '<AuthnProviderAlias>' - Move the check for METHOD_MASK out of the authz providers and into the authz_core provider vector - Define the status codes that can be returned by the authz providers as AUTHZ_DENIED, AUTHZ_GRANTED and AUTHZ_GENERAL_ERROR - Remove the 'Satisfy' directive - Implement the '<RequireAll>', '<RequireOne>' block directives to handle the 'and' and 'or' logic for authorization. - Remove the 'AuthzXXXAuthoritative' directives from all of the authz providers - Implement the 'Reject' directive that will deny authorization if the argument is true - Fold the 'Reject' directive into the '<RequireAll>', '<RequireOne>' logic - Reimplement the host based authorization functionality provided by 'allow', 'deny' and 'order' as authz providers - Remove the 'allow', 'deny' and 'order' directives - Merge mod_authn_alias into mod_authn_core - Add '<RequireAlias>' functionality which is similar to '<AuthnProviderAlias>' but specific to authorization aliasing - Remove all of the references to the 'authzxxxAuthoritative' directives from the documentation - Remove the 'Satisfy' directive from the documentation - Remove 'Allow', 'Deny', 'Order' directives from the documentation - Document '<RequireAll>', '<RequireOne>', 'Reject' directives - Reimplement the APIs ap_auth_type(), ap_auth_name() as optional functions and move the actual implementation into mod_authn_core - Reimplement the API ap_some_auth_required() as an optional function and move the actual implementation into mod_authz_core Major Changes: - Added the directives <RequireAll>, <RequireOne>, <RequireAlias>, Reject - Expanded the functionality of the directive 'Require' to handle all authorization and access control - Added the new authz providers 'env', 'ip', 'host', 'all' to handle host-based access control - Removed the directives 'Allow', 'Deny', 'Order', 'Satisfy', 'AuthzXXXAuthoritative' - Removed the ap_require() API - Moved the directives 'AuthType', 'AuthName' out of mod_core and into mod_authn_core - Moved the directive 'Require' out of mod_core and into mod_authz_core - Merged mod_authn_alias into mod_authn_core - Renamed mod_authz_dbm authz providers from 'group' and 'file-group' to 'dbm-group' and 'dbm-file-group' Benefits: - All authorization and access control is now handle through two directives, 'Require' and 'Reject' - Authorization has been expanded to allow for complex 'AND/OR' control logic through the directives '<RequireAll>' and '<RequireOne>' - Configuration is now much simpler and consistent across the board - Other modules like mod_ssl and mod_proxy should be able to plug into and take advantage of the same provider based authorization mechanism by implementing their own providers Issues: - Backwards compatibility between 2.2 and 2.3 configurations will be broken in the area of authorization and access control due to the fact that the directives 'allow', 'deny', 'order' and 'satisfy' have been removed. When moving from 2.2 to 2.3 these directives will have to be changed to 'Require all granted', 'Require all denied' or some variation of the authz host-based providers. - Existing third party authorization modules will have to adapt to the new structure. /httpd/docs/manual/mod/mod_authn_core.xml - 367d146f245f3b1c9f77c18e6ec591b52e0b344c bnicholes