Re: s/key authentication for Apache on FreeBSD?

From: Mark Murray (mark_at_grondar.org)
Date: 12/14/03

  • Next message: Mike Tancsa: "Re: cvs version 1.11.10 import? [security fix]" 
    To: Brett Glass <brett@lariat.org>
Date: Sun, 14 Dec 2003 12:45:17 +0000

    Hi

    This is now off FreeBSD (no more PAM), and is VERY httpd/Apache
    specific. I suggest you move it to the Apache lists, where no doubt
    more Apache experts will be able to help you out.

    Thanks!

    M

    Brett Glass writes:
    > At 10:45 PM 12/13/2003, Matthew D. Fuller wrote:
    >
    > >HTTP AUTH sends the user/pass strings with every request (more precisely,
    > >the browser caches what you put in, and sends it every time the server
    > >returns a 401 with the same realm name.)
    >
    > I apologize; I wasn't being clear. My question was, does the Apache
    > server then send the user name and password on to the library that
    > is doing authentication every time? Or does it recognize that the
    > user and password (and/or IP) are the same as before and allow
    > subsequent hits?
    >
    > --Brett
    >
    >
    > _______________________________________________
    > freebsd-security@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-security
    > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org" 

    --
Mark Murray
iumop ap!sdn w,I idlaH
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
  • Next message: Mike Tancsa: "Re: cvs version 1.11.10 import? [security fix]"

    Relevant Pages

    • File Corruption
      ... I originally posted this question to the Apache list and was strongly ... This server is dedicated to hosting files for download through http ... I googled and searched the lists but have only found tips regarding speeding ...
      (freebsd-questions)
    • Re: LimitRequestBody config
      ... is there the Apache setting as the title? ... the list of "run-tim configuration directives". ... I read messages from the public lists. ...
      (Fedora)
    • Re: Problem: php not working with apache on RedHat 9.0
      ... "I havenšt checked the lists lateley, ... Apache 2.x, Upgrade/downgrape to apache 1.3x. ... Check the PHP and Apache ...
      (RedHat)
    • Re: Modlisp for newbies by a newbie
      ... | I've written a little document that lists the steps I took to get the ... same server as Apache, to avoid the risks of having yet another ... If you trust the other users on your server, ... that cl-modlisp already does this, but if not it should be pretty ...
      (comp.lang.lisp)
    • Netscape working / IE failing
      ... I am trying to list the files in a directory of a APACHE ... http server in the IE ... This works fine with Netscape (and it lists the files in ... index.html - It works fine in both IE and Netscape ?. ...
      (microsoft.public.windows.inetexplorer.ie6.browser)