Changes in NWGNUmakefile http://src.iws.cs.ovgu.de/source/rss/httpd/modules/aaa/NWGNUmakefile en Copyright 2005 Java Added mod_allowhandlers to NetWare build. /httpd/modules/aaa/NWGNUmakefile - ef06a12023b00bdbe0b983192e4afdbdb21139e3 fuankg Some NetWare build tweaks. Added check for APR_HAS_LDAP; renamed some build vars. /httpd/modules/aaa/NWGNUmakefile - 99e93b940fa004264fbf50595399b5fbfbd91537 fuankg Use a var INSTALLBASE to simplify NetWare installation rules. /httpd/modules/aaa/NWGNUmakefile - 00d1c0c914426a97022d8205a875c48b211001c2 fuankg NetWare build overhaul in order to compile on Linux. Take 1. /httpd/modules/aaa/NWGNUmakefile - 0662ed52e814f8f08ef0e09956413a792584eddf fuankg Build mod_allowmethods (windows and netware stuff needs to be tested). Change method bit vector to 64 bits /httpd/modules/aaa/NWGNUmakefile - b4a00883f358625923365ca1560c96edec172a52 sf Added mod_authn_socache to NetWare build. /httpd/modules/aaa/NWGNUmakefile - 1569fefafbfcbc266c7d712eb068e58847c217b7 fuankg added mod_auth_form to NetWare build. /httpd/modules/aaa/NWGNUmakefile - 06509499ae5b6676db799057108433170a23ed28 fuankg removed obsolete -prefix; minor cosmetic changes. /httpd/modules/aaa/NWGNUmakefile - ac7985784d08a3655291f24f711812b4d8b1cbcf fuankg Implement a BASEDIR build environment variable to allow the NetWare build to relocate the install files Submitted by: Guenter Knauf <fuankg apache org> /httpd/modules/aaa/NWGNUmakefile - f2f3f241c00a7a4bd597e57a19023940e072918a bnicholes Build mod_access_compat on NetWare /httpd/modules/aaa/NWGNUmakefile - 1f145fc8204dbb305cfbfe658a2b9518d5a79b3a bnicholes Update the NetWare makefiles to build the authz code /httpd/modules/aaa/NWGNUmakefile - f7d723f1ad88ed006c6caf4c2c6604b7c59dd172 bnicholes Authz refactoring Merge from branches/authz-dev Basically here is a list of what has been done: - Convert all of the authz modules from hook based to provider based - Remove the ap_requires field from the core_dir_config structure - Remove the function ap_requires() since its functionality is no longer supported or necessary in the refactoring - Remove the calls to ap_some_auth_required() in the core request handling to allow the hooks to be called in all cases. - Add the new module mod_authz_core which will act as the authorization provider vector and contain common authz directives such as 'Require', 'Reject' and '<RequireAlias>' - Add the new module mod_authn_core which will contain common authentication directives such as 'AuthType', 'AuthName' and '<AuthnProviderAlias>' - Move the check for METHOD_MASK out of the authz providers and into the authz_core provider vector - Define the status codes that can be returned by the authz providers as AUTHZ_DENIED, AUTHZ_GRANTED and AUTHZ_GENERAL_ERROR - Remove the 'Satisfy' directive - Implement the '<RequireAll>', '<RequireOne>' block directives to handle the 'and' and 'or' logic for authorization. - Remove the 'AuthzXXXAuthoritative' directives from all of the authz providers - Implement the 'Reject' directive that will deny authorization if the argument is true - Fold the 'Reject' directive into the '<RequireAll>', '<RequireOne>' logic - Reimplement the host based authorization functionality provided by 'allow', 'deny' and 'order' as authz providers - Remove the 'allow', 'deny' and 'order' directives - Merge mod_authn_alias into mod_authn_core - Add '<RequireAlias>' functionality which is similar to '<AuthnProviderAlias>' but specific to authorization aliasing - Remove all of the references to the 'authzxxxAuthoritative' directives from the documentation - Remove the 'Satisfy' directive from the documentation - Remove 'Allow', 'Deny', 'Order' directives from the documentation - Document '<RequireAll>', '<RequireOne>', 'Reject' directives - Reimplement the APIs ap_auth_type(), ap_auth_name() as optional functions and move the actual implementation into mod_authn_core - Reimplement the API ap_some_auth_required() as an optional function and move the actual implementation into mod_authz_core Major Changes: - Added the directives <RequireAll>, <RequireOne>, <RequireAlias>, Reject - Expanded the functionality of the directive 'Require' to handle all authorization and access control - Added the new authz providers 'env', 'ip', 'host', 'all' to handle host-based access control - Removed the directives 'Allow', 'Deny', 'Order', 'Satisfy', 'AuthzXXXAuthoritative' - Removed the ap_require() API - Moved the directives 'AuthType', 'AuthName' out of mod_core and into mod_authn_core - Moved the directive 'Require' out of mod_core and into mod_authz_core - Merged mod_authn_alias into mod_authn_core - Renamed mod_authz_dbm authz providers from 'group' and 'file-group' to 'dbm-group' and 'dbm-file-group' Benefits: - All authorization and access control is now handle through two directives, 'Require' and 'Reject' - Authorization has been expanded to allow for complex 'AND/OR' control logic through the directives '<RequireAll>' and '<RequireOne>' - Configuration is now much simpler and consistent across the board - Other modules like mod_ssl and mod_proxy should be able to plug into and take advantage of the same provider based authorization mechanism by implementing their own providers Issues: - Backwards compatibility between 2.2 and 2.3 configurations will be broken in the area of authorization and access control due to the fact that the directives 'allow', 'deny', 'order' and 'satisfy' have been removed. When moving from 2.2 to 2.3 these directives will have to be changed to 'Require all granted', 'Require all denied' or some variation of the authz host-based providers. - Existing third party authorization modules will have to adapt to the new structure. /httpd/modules/aaa/NWGNUmakefile - 367d146f245f3b1c9f77c18e6ec591b52e0b344c bnicholes Add mod_authn_dbd to the NetWare build Submitted by: <nowmW bocnet.com.au> /httpd/modules/aaa/NWGNUmakefile - ea852c9126968a5a8925d089cf2c119d8a2ea92f bnicholes Add mod_authn_alias to the build /httpd/modules/aaa/NWGNUmakefile - 7825bb798c5cdbed5865904896146aea6da1fd52 bnicholes Update the netware make files to stop building the ldap modules from experimental and start building from the new locations. /httpd/modules/aaa/NWGNUmakefile - b0827492bc89f04870db952fa9b940e76c975489 bnicholes Re-structure the auth_ldap module to fit the new authentication model. The authnz_ldap module provides an ldap authentication provider and an authorization handler. It implements the authorization "require" values ldap-user, ldap-dn and ldap-group. This restructure also moves auth_ldap out of the experimental directory. /httpd/modules/aaa/NWGNUmakefile - 302abf53d2b1a686f6eafd445c49e1e006afb190 bnicholes NetWare make files and .def to build the new auth modules /httpd/modules/aaa/NWGNUmakefile - 3c937b528ca923d5b51e63def9f888af4a77bb40 bnicholes Switching from a project build file to GNU make files /httpd/modules/aaa/NWGNUmakefile - bb2b38cd44b032118359afbc743efbea12f48e61 bnicholes