httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From r...@imdb.com (Rob Hartill)
Subject Re: Suggestion for mod_auth.c
Date Thu, 25 Jul 1996 13:47:54 GMT

Hi,

thanks for the patch. The idea seems to be reasonable. I'll
pass this on to the developers for consideration.

regards,
rob

Nancy Deschenes wrote:
>
>Considering AuthDBMUserFile is allowed extra information after the
>password, as long as it is separated from it by a colon, it would be
>nice if the AuthUserFile had the same possibility.
>
>It is certainly easy to fix by hand, but you may want to include this
>patch in future releases.  
>
>Thank you for a great server!  I love the multi-port abilities, 
>and each time I look at the source, I'm impressed.  Good work!
>
>Nancy Deschenes
>
>
>nancyd@ana 23% diff -ru mod_auth.c.orig mod_auth.c
>--- mod_auth.c.orig     Wed Jul 24 22:11:38 1996
>+++ mod_auth.c  Wed Jul 24 22:15:18 1996
>@@ -161,7 +161,7 @@
>     auth_config_rec *sec =
>       (auth_config_rec *)get_module_config (r->per_dir_config,
>&auth_module);
>     conn_rec *c = r->connection;
>-    char *sent_pw, *real_pw;
>+    char *sent_pw, *real_pw, *colon_pw;
>     char errstr[MAX_STRING_LEN];
>     int res;
>     
>@@ -176,6 +176,9 @@
>        note_basic_auth_failure (r);
>        return AUTH_REQUIRED;
>     }
>+    /* Password is up to first : if exists */
>+    colon_pw = strchr(real_pw,':');
>+    if (colon_pw) *colon_pw='\0';   
>     /* anyone know where the prototype for crypt is? */
>     if(strcmp(real_pw,(char *)crypt(sent_pw,real_pw))) {
>         sprintf(errstr,"user %s: password mismatch",c->user);


-- 
Rob Hartill (robh@imdb.com)
The Internet Movie Database (IMDb)  http://www.imdb.com/
           ...more movie info than you can poke a stick at.

Mime
View raw message