Changes in mod_authz_groupfile.xml http://src.iws.cs.ovgu.de/source/rss/httpd/docs/manual/mod/mod_authz_groupfile.xml en Copyright 2005 Java Add <compatibility> notes for changes made in version 2.4.8 + synch formating with 2.4.x /httpd/docs/manual/mod/mod_authz_groupfile.xml - 9a2b3982c53d51e2d2df29b6f94cc25e2ed134bc jailletc36 mod_authnz_groupfile: Support the expression parser within the require directives. /httpd/docs/manual/mod/mod_authz_groupfile.xml - 4816cd796cb9da2fb18a2d382586a926e0e9ae54 minfrin Drop pre-2.3 compatibility notes from trunk docs. /httpd/docs/manual/mod/mod_authz_groupfile.xml - 158222078a98fb13cddf2793b42f7eb8eafe51ae rjung Cleanup effort in prep for GA push: Trim trailing whitespace... no func change /httpd/docs/manual/mod/mod_authz_groupfile.xml - 860b4efe27e7c1c9a2bf5c872b29c90f76849b51 jim PR #43358 - Fix links to moved auth directives (Takashi Sato) /httpd/docs/manual/mod/mod_authz_groupfile.xml - 9cd3b05d7b70f07a742bbaf548fa4fa2bdbe5ce6 noodl update license header text /httpd/docs/manual/mod/mod_authz_groupfile.xml - db479b48bd4d75423ed4a45e15b75089d1a8ad72 fielding Update the copyright year in all .c, .h and .xml files /httpd/docs/manual/mod/mod_authz_groupfile.xml - 3d81f57512275ca06a60a9bcbd23c1f8b429fdf2 colm Authz refactoring Merge from branches/authz-dev Basically here is a list of what has been done: - Convert all of the authz modules from hook based to provider based - Remove the ap_requires field from the core_dir_config structure - Remove the function ap_requires() since its functionality is no longer supported or necessary in the refactoring - Remove the calls to ap_some_auth_required() in the core request handling to allow the hooks to be called in all cases. - Add the new module mod_authz_core which will act as the authorization provider vector and contain common authz directives such as 'Require', 'Reject' and '<RequireAlias>' - Add the new module mod_authn_core which will contain common authentication directives such as 'AuthType', 'AuthName' and '<AuthnProviderAlias>' - Move the check for METHOD_MASK out of the authz providers and into the authz_core provider vector - Define the status codes that can be returned by the authz providers as AUTHZ_DENIED, AUTHZ_GRANTED and AUTHZ_GENERAL_ERROR - Remove the 'Satisfy' directive - Implement the '<RequireAll>', '<RequireOne>' block directives to handle the 'and' and 'or' logic for authorization. - Remove the 'AuthzXXXAuthoritative' directives from all of the authz providers - Implement the 'Reject' directive that will deny authorization if the argument is true - Fold the 'Reject' directive into the '<RequireAll>', '<RequireOne>' logic - Reimplement the host based authorization functionality provided by 'allow', 'deny' and 'order' as authz providers - Remove the 'allow', 'deny' and 'order' directives - Merge mod_authn_alias into mod_authn_core - Add '<RequireAlias>' functionality which is similar to '<AuthnProviderAlias>' but specific to authorization aliasing - Remove all of the references to the 'authzxxxAuthoritative' directives from the documentation - Remove the 'Satisfy' directive from the documentation - Remove 'Allow', 'Deny', 'Order' directives from the documentation - Document '<RequireAll>', '<RequireOne>', 'Reject' directives - Reimplement the APIs ap_auth_type(), ap_auth_name() as optional functions and move the actual implementation into mod_authn_core - Reimplement the API ap_some_auth_required() as an optional function and move the actual implementation into mod_authz_core Major Changes: - Added the directives <RequireAll>, <RequireOne>, <RequireAlias>, Reject - Expanded the functionality of the directive 'Require' to handle all authorization and access control - Added the new authz providers 'env', 'ip', 'host', 'all' to handle host-based access control - Removed the directives 'Allow', 'Deny', 'Order', 'Satisfy', 'AuthzXXXAuthoritative' - Removed the ap_require() API - Moved the directives 'AuthType', 'AuthName' out of mod_core and into mod_authn_core - Moved the directive 'Require' out of mod_core and into mod_authz_core - Merged mod_authn_alias into mod_authn_core - Renamed mod_authz_dbm authz providers from 'group' and 'file-group' to 'dbm-group' and 'dbm-file-group' Benefits: - All authorization and access control is now handle through two directives, 'Require' and 'Reject' - Authorization has been expanded to allow for complex 'AND/OR' control logic through the directives '<RequireAll>' and '<RequireOne>' - Configuration is now much simpler and consistent across the board - Other modules like mod_ssl and mod_proxy should be able to plug into and take advantage of the same provider based authorization mechanism by implementing their own providers Issues: - Backwards compatibility between 2.2 and 2.3 configurations will be broken in the area of authorization and access control due to the fact that the directives 'allow', 'deny', 'order' and 'satisfy' have been removed. When moving from 2.2 to 2.3 these directives will have to be changed to 'Require all granted', 'Require all denied' or some variation of the authz host-based providers. - Existing third party authorization modules will have to adapt to the new structure. /httpd/docs/manual/mod/mod_authz_groupfile.xml - 367d146f245f3b1c9f77c18e6ec591b52e0b344c bnicholes Update copyright year to 2005 and standardize on current copyright owner line. /httpd/docs/manual/mod/mod_authz_groupfile.xml - 08cb74ca432a8c24e39f17dedce527e6a47b8001 jerenkrantz fix copyright notice /httpd/docs/manual/mod/mod_authz_groupfile.xml - fe9dca85c9e1544931fb420615372c10c0181ea7 nd These modules are for authorization, not authentication. /httpd/docs/manual/mod/mod_authz_groupfile.xml - 43d99bfb458baee0a702c56a4ef4200e75c4dbb8 yoshiki $Revision$ is slightly misdocumented (only available since svn 1.1) use LastChangedRevision instead /httpd/docs/manual/mod/mod_authz_groupfile.xml - 5f5d1b4cc970b7f06ff8ef6526128e9a27303d88 nd adjust properties and revision expansion of the English docs /httpd/docs/manual/mod/mod_authz_groupfile.xml - 70ce08850895485160d91d333b5a487ee2f80fbc nd add $Revision$ keyword /httpd/docs/manual/mod/mod_authz_groupfile.xml - 68cd30d6fb171881925dff9669d04affea29d2b7 nd fix name of The Apache Software Foundation /httpd/docs/manual/mod/mod_authz_groupfile.xml - 6fbd2e53c97ea6976d93e0ac521adabc55e0fb73 nd apply Apache License, Version 2.0 /httpd/docs/manual/mod/mod_authz_groupfile.xml - d5d794fc2f4cc9ca6d6da17cfa2cdcd8d244bacd nd add the metafile attribute to all xml files. /httpd/docs/manual/mod/mod_authz_groupfile.xml - 7db9f691a00ead175b03335457ca296a33ddf31b nd full clean-up of the auth-docs; feel free to shake out any nits, if there are (probably there *are* :) main changes: - introduce docs for mod_authn_default, mod_authz_default and mod_authz_user - fix argument lists of the provider directives - fix the examples (intended to be better :) - introduce the AuthDigestShmemSize directive - remove AuthDigestUser/GroupFile - mention htdigest in AuthUserFile docs - mod_authn_anon is now an authn provider - markup Reviewed by: Astrid Ke�ler <kess@kess-net.de> /httpd/docs/manual/mod/mod_authz_groupfile.xml - 35ffb30f57f777dbf3f17c5a5ddf706559942c16 nd fix compatibility notes (2.0.44 -> 2.1) did no update of the japanese transformations, because it creates somewhat weird on my system... /httpd/docs/manual/mod/mod_authz_groupfile.xml - 169280c7e65362d4ed444ec262c3f22a6a280166 nd Update the docs to fully reflect the aaa changes by linking in the new modules and removing the deleted ones; renaming mod_auth_anon->mod_authn_anon, and mod_access->mod_authz_host. All docs to the old modules are now deleted. Translations were kept with their old modules. (Can't read Japanese.) /httpd/docs/manual/mod/mod_authz_groupfile.xml - 1f53e295ebd19aed1767d12da7abfab9936c148c jerenkrantz