29efcc3f2b903c1a70aae80c174547e6d638492c David Mugnai dvd@develer.com http://github.com/saju/mod_auth_remote/commit/733010a2381ac5e3301e848ea3c3ef55b53df5c3 733010a2381ac5e3301e848ea3c3ef55b53df5c3 2009-09-23T00:53:25-07:00 2009-09-22T01:25:05-07:00 alloc a buffer of exactly 20 bytes Signed-off-by: Saju Pillai <saju.pillai@gmail.com> 982b65c2de29c9adff1647674f7a34bde3dc4152 Saju Pillai saju.pillai@gmail.com ad42bd84fb8c87d94afe50e853aa5b92ee4c5d3f David Mugnai dvd@develer.com http://github.com/saju/mod_auth_remote/commit/29efcc3f2b903c1a70aae80c174547e6d638492c 29efcc3f2b903c1a70aae80c174547e6d638492c 2009-09-23T00:48:49-07:00 2009-09-22T01:24:46-07:00 default port is 443 for https connection Signed-off-by: Saju Pillai <saju.pillai@gmail.com> d6af45de67186a50754b8c8d6a6efe43f3ff3084 Saju Pillai saju.pillai@gmail.com 60ad1d108d65b2e174f85b3d1fcec16b287e004a Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/ad42bd84fb8c87d94afe50e853aa5b92ee4c5d3f ad42bd84fb8c87d94afe50e853aa5b92ee4c5d3f 2008-11-30T21:15:26-08:00 2008-11-30T21:15:26-08:00 using global ssl ctx for now a463ef468cc00e7bdde84f623adeee44cf618c40 Saju Pillai saju.pillai@gmail.com eae481648a44f43f4878ff5b9ac1c43640f9e090 Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/60ad1d108d65b2e174f85b3d1fcec16b287e004a 60ad1d108d65b2e174f85b3d1fcec16b287e004a 2008-11-30T03:45:00-08:00 2008-11-30T03:45:00-08:00 per_dir ssl ctx is not working in post_config hook - hmm 2d045c8bd0f20e02688afab165a2baea4b763f5b Saju Pillai saju.pillai@gmail.com 82d44a91471d52276281b21b9214eea4486c70c1 19186826ef019f9cd4b5fda1da044dc8a014ad34 Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/eae481648a44f43f4878ff5b9ac1c43640f9e090 eae481648a44f43f4878ff5b9ac1c43640f9e090 2008-11-27T10:53:17-08:00 2008-11-27T10:53:17-08:00 Merge branch 'master' into ssl_backend Conflicts: docs/sample.conf 0c4f11216cf43f47bee258fb444a62c4cce4f342 Saju Pillai saju.pillai@gmail.com 64e70f9fbde8edbe7d14f015dce9c840567ad0e7 61eaebe4c4bd15d28eec8e7fdd8c263b8ad73dae Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/19186826ef019f9cd4b5fda1da044dc8a014ad34 19186826ef019f9cd4b5fda1da044dc8a014ad34 2008-11-27T10:51:44-08:00 2008-11-27T10:51:44-08:00 Merge branch '0,2-beta' Conflicts: docs/sample.conf mainly to grab the line wraps for mod_auth_remote.c 85963126fb4f3733624c899fd76e6e7e738399aa Saju Pillai saju.pillai@gmail.com 046ea5edbc1a6004269f2e47efa6c15cbabc622d 61eaebe4c4bd15d28eec8e7fdd8c263b8ad73dae Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/82d44a91471d52276281b21b9214eea4486c70c1 82d44a91471d52276281b21b9214eea4486c70c1 2008-11-27T10:48:18-08:00 2008-11-27T10:48:18-08:00 Merge branch '0,2-beta' into ssl_backend Conflicts: docs/sample.conf src/mod_auth_remote.c 3a89077a668cce0341ec9c2b25dad8721bedb0d8 Saju Pillai saju.pillai@gmail.com 21dff03eda2fa75fea55ad19bd827af4d26193d6 Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/046ea5edbc1a6004269f2e47efa6c15cbabc622d 046ea5edbc1a6004269f2e47efa6c15cbabc622d 2008-11-27T10:46:30-08:00 2008-11-27T10:46:30-08:00 setup ssl configuration and mod_ssl detection 476e3a096981f634c703db9a16c3cfefca5879d8 Saju Pillai saju.pillai@gmail.com 21dff03eda2fa75fea55ad19bd827af4d26193d6 Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/64e70f9fbde8edbe7d14f015dce9c840567ad0e7 64e70f9fbde8edbe7d14f015dce9c840567ad0e7 2008-11-27T02:22:17-08:00 2008-11-27T02:22:17-08:00 todo efd0c1b95a7f996ae8ffd303f55f0629144326f7 Saju Pillai saju.pillai@gmail.com 2decedb66ee164fe1718284d39eda15f0ea8f418 Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/61eaebe4c4bd15d28eec8e7fdd8c263b8ad73dae 61eaebe4c4bd15d28eec8e7fdd8c263b8ad73dae 2008-11-27T00:37:20-08:00 2008-11-27T00:37:20-08:00 Documentation changes with comments from Guenter Knuaf * note on the trailing '/' needed for AuthRemoteURL to prevent a 301 redirect problem * Conditional loading of mod_auth_basic.so * Prune long lines a1eafac84baea6e18a8222b954f83d18aeb6379c Saju Pillai saju.pillai@gmail.com 52b772f09e30a534a5772de1f2d0877403f644ad Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/2decedb66ee164fe1718284d39eda15f0ea8f418 2decedb66ee164fe1718284d39eda15f0ea8f418 2008-11-27T00:16:05-08:00 2008-11-27T00:16:05-08:00 Patch from Guenter Knauf tab -> space toupper() -> apr_toupper() strstr -> ap_strstr() 30a6a7aa65be8e4bd6888773bc7e8ba3d21240a6 Saju Pillai saju.pillai@gmail.com 78770700fa7824eb6a0d56500456eb34b4f66505 Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/52b772f09e30a534a5772de1f2d0877403f644ad 52b772f09e30a534a5772de1f2d0877403f644ad 2008-11-25T22:12:50-08:00 2008-11-25T22:12:50-08:00 patch from Guenter Knauf Makefile- look for apxs and apxs2 as some distros ship apxs2 mod_auth_remote.c - (apr_port_t)conf->remote_port cast to make win32 cc quiet 78e745719033a2d2d3b19c6fe40a913dc98b0eb1 Saju Pillai saju.pillai@gmail.com 78770700fa7824eb6a0d56500456eb34b4f66505 Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/21dff03eda2fa75fea55ad19bd827af4d26193d6 21dff03eda2fa75fea55ad19bd827af4d26193d6 2008-11-25T08:04:30-08:00 2008-11-25T08:04:30-08:00 added readme to give github fuzzy warm feelings 37c7971e175fcc1dfc8f30832afe5c1f17cb981c Saju Pillai saju.pillai@gmail.com 8bf46128ca3a6d56a2e8b409cdfb490b29c3c27d Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/78770700fa7824eb6a0d56500456eb34b4f66505 78770700fa7824eb6a0d56500456eb34b4f66505 2008-11-25T06:52:02-08:00 2008-11-25T06:52:02-08:00 nod to contributors eaa5dd5858b265e85502019e1cee9833ffa2cced Saju Pillai saju.pillai@gmail.com efe93c700e0c4221626b0cc755d3d15b577edf99 Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/8bf46128ca3a6d56a2e8b409cdfb490b29c3c27d 8bf46128ca3a6d56a2e8b409cdfb490b29c3c27d 2008-11-25T06:27:29-08:00 2008-11-25T06:27:29-08:00 tweak docs #2 - no we dont support DIGEST methods yet :P f8ede2175f937895ae04324aedea6557ef6ad5b9 Saju Pillai saju.pillai@gmail.com 1c0cec56ee60efb6c77ebc9f65c59dfbf8c03fdd Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/efe93c700e0c4221626b0cc755d3d15b577edf99 efe93c700e0c4221626b0cc755d3d15b577edf99 2008-11-25T06:11:19-08:00 2008-11-25T06:11:19-08:00 tweak doc 9259b18efcd70e5fdaad0f35e7785351db3b7c42 Saju Pillai saju.pillai@gmail.com 1b0e2926c46516291733c14f58eddb5602cce0c4 Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/1c0cec56ee60efb6c77ebc9f65c59dfbf8c03fdd 1c0cec56ee60efb6c77ebc9f65c59dfbf8c03fdd 2008-11-25T05:46:05-08:00 2008-11-25T05:46:05-08:00 Documentation, makefiles and APR_RANDOM check d2a0e8bdbc845edcb10d69c63391306424aac8c6 Saju Pillai saju.pillai@gmail.com 27bcf9804feb267cdb37a80e3b9ca9fa6b52c7a9 Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/1b0e2926c46516291733c14f58eddb5602cce0c4 1b0e2926c46516291733c14f58eddb5602cce0c4 2008-11-25T03:44:17-08:00 2008-11-25T03:44:17-08:00 AuthRemoteURL accepts path as well as full urls AuthRemoteURL nos superceedes AuthRemotePort and AuthRemoteServer though both are supported for backward compatibility eg: AuthRemoteURL /safe/path AuthRemotePort 80 AuthRemoteServer www.example.com is equivalent to AuthRemoteURL http://www.example.com/safe/path 793455bf66f7d89192e4770f0fbd22619155c7bf Saju Pillai saju.pillai@gmail.com 74f147f6e49ee8c7900ac257ceb6fda3900c87ee Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/27bcf9804feb267cdb37a80e3b9ca9fa6b52c7a9 27bcf9804feb267cdb37a80e3b9ca9fa6b52c7a9 2008-11-25T02:46:22-08:00 2008-11-25T02:46:22-08:00 fix arg ordering in AuthRemoteCookie 342a9f69c69274f7009d4f717396e410e6404e38 Saju Pillai saju.pillai@gmail.com 395b05118ce5b4ccee432e1c5910a9aded5fc5c4 Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/74f147f6e49ee8c7900ac257ceb6fda3900c87ee 74f147f6e49ee8c7900ac257ceb6fda3900c87ee 2008-11-25T02:39:05-08:00 2008-11-25T02:39:05-08:00 AuthRemoteCookie now takes 3 arguments, Cookie name, Cookie path, Cookie duration The path and duration are optional, defaulting to "/" and 20 mins. It is recommended that all the parameters be set, especially the path as the default "/" will cause the auth_remote cookie to be sent back by the client for all requests to the server. d26f70b2bf615af6ce2f24763a2abd2ea518f521 Saju Pillai saju.pillai@gmail.com 8361cf3aaa5beb761be65168066420ce07e24577 Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/395b05118ce5b4ccee432e1c5910a9aded5fc5c4 395b05118ce5b4ccee432e1c5910a9aded5fc5c4 2008-11-25T01:10:04-08:00 2008-11-25T01:10:04-08:00 Secret salt is now generated using the apr_random api For people lacking a proper source of randomness or missing apr random apis, passing in the AUTH_REMOTE_NO_SALT flag during compilation will remove the dependency on apr_random.h but this will also disable cookies (i.e. revert to original authenticate every request model) 5ab306b136158d2a6b7ee556fe39df833a588b86 Saju Pillai saju.pillai@gmail.com 0e132070710c2cfa02b7258b9c0899b44c2e402a Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/8361cf3aaa5beb761be65168066420ce07e24577 8361cf3aaa5beb761be65168066420ce07e24577 2008-11-24T17:21:23-08:00 2008-11-24T17:21:23-08:00 Initial support for authentication state caching via cookies Added AuthRemoteCookie directive. AuthRemoteCookie hrapp_auth_cookie 150 Advises mod_auth_remote to create a cookie called hrapp_auth_cookie that expires in 150 secs. Once a user logs in successfully, for the next 150 secs he can log in without mod_auth_remote performing an actual login on the backend. The cookie (handling code) is reasonably secure. The cookie contains the username, timestamp of authenticated login and an MD5 of the username,timestamp and a secret random string. When a mismatch b/w r->remote_user and cookie user occurs or a mismatch between the signature in the cookie and the signature regenerated at the server occurs or the cookie expires the user is authenticated against the actual backend authentication system. b5bce720df45cca98cf5a74ca50195406f5e53ec Saju Pillai saju.pillai@gmail.com f561516be36d59245925be50a1435b945783b6d5 Saju Pillai saju.pillai@gmail.com http://github.com/saju/mod_auth_remote/commit/0e132070710c2cfa02b7258b9c0899b44c2e402a 0e132070710c2cfa02b7258b9c0899b44c2e402a 2008-11-24T09:15:58-08:00 2008-11-24T09:15:58-08:00 New config directive AuthRemoteLocation AuthRemoteLocation specifies the complete http:// uri to the authenticating location. for eg. AuthRemoteLocation http://www.myserver.com/secure/service AuthRemoteLocation superceedes the older directives AuthRemoteServer, AuthRemotePort, AuthRemoteURL which are still valid for backward compatibility 77733d8dcd5db8331e77060da40a8dce0893b65b Saju Pillai saju.pillai@gmail.com d911c8f53ede05ad6b93e5205d08ecdf030daa6a Saju Pillai srp@ideadevice.com http://github.com/saju/mod_auth_remote/commit/f561516be36d59245925be50a1435b945783b6d5 f561516be36d59245925be50a1435b945783b6d5 2008-11-24T07:54:18-08:00 2008-11-24T07:54:18-08:00 Added copyright and license terms 525b7686bb4372707cc320a7384ba7af1a39dfdd Saju Pillai srp@ideadevice.com Saju Pillai srp@ideadevice.com http://github.com/saju/mod_auth_remote/commit/d911c8f53ede05ad6b93e5205d08ecdf030daa6a d911c8f53ede05ad6b93e5205d08ecdf030daa6a 2008-11-24T07:09:16-08:00 2008-11-24T07:09:16-08:00 Initial commit for mod_auth_remote mod_auth_remote is a authentication module for apache httpd ver 2.2. mod_auth_remote takes a supplied username & password combination and authenticates it against a remote server. This allows proxy of authentication to a remote server/service mod_auth_remote for older apache versions is available at http://saju.pillai.googlepages.com 56e1aca2c6d459dc0b926e4452a78cb892f6eea9 Saju Pillai srp@ideadevice.com