Return-Path: Delivered-To: apmail-httpd-dev-archive@www.apache.org Received: (qmail 57660 invoked from network); 11 Oct 2006 10:48:14 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur.apache.org with SMTP; 11 Oct 2006 10:48:14 -0000 Received: (qmail 28393 invoked by uid 500); 11 Oct 2006 10:48:10 -0000 Delivered-To: apmail-httpd-dev-archive@httpd.apache.org Received: (qmail 28339 invoked by uid 500); 11 Oct 2006 10:48:10 -0000 Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list dev@httpd.apache.org Received: (qmail 28328 invoked by uid 99); 11 Oct 2006 10:48:10 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 11 Oct 2006 03:48:10 -0700 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: domain of apache-dev@m.gmane.org designates 80.91.229.2 as permitted sender) Received: from [80.91.229.2] (HELO ciao.gmane.org) (80.91.229.2) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 11 Oct 2006 03:48:09 -0700 Received: from list by ciao.gmane.org with local (Exim 4.43) id 1GXbc2-00061r-Um for dev@httpd.apache.org; Wed, 11 Oct 2006 12:46:58 +0200 Received: from blueice3n1.uk.ibm.com ([195.212.29.83]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 11 Oct 2006 12:46:58 +0200 Received: from sagrera by blueice3n1.uk.ibm.com with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 11 Oct 2006 12:46:58 +0200 X-Injected-Via-Gmane: http://gmane.org/ To: dev@httpd.apache.org From: "Javier Sagrera" Subject: Re: Clarification on how check_user_id hook works Date: Wed, 11 Oct 2006 11:45:42 +0100 Lines: 56 Message-ID: References: <1404e5910610091928u2cdab77g3a19422b4b8f1818@mail.gmail.com> <200610101046.34045.nick@webthing.com> <1404e5910610100758l3795c593gfe6968d9e01d89bb@mail.gmail.com> <452BBEEE.3235.00AC.0@novell.com> X-Complaints-To: usenet@sea.gmane.org X-Gmane-NNTP-Posting-Host: blueice3n1.uk.ibm.com X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2900.2869 X-RFC2646: Format=Flowed; Original X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869 Sender: news X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Hi, I think i got a clear picture now, it is true that by saying MIDDLE you really can expect any specific to be followed. I guess that the new directives in 2.2 would help me to have a little more control over the sequence of execution. Thanks to all for taking some time in responding my emails. Cheers, Javier "Brad Nicholes" wrote in message news:452BBEEE.3235.00AC.0@novell.com... >>>> On 10/10/2006 at 8:58 AM, in message > <1404e5910610100758l3795c593gfe6968d9e01d89bb@mail.gmail.com>, "Eric > Covener" > wrote: >> On 10/10/06, Javier Sagrera wrote: >>> So, i can write my modules, based on modules that i know will have a >>> "conflict" with mine using the "if ..." >>> but that is a little limited, i just find strange that you dont have >>> control >>> of the order in which the functions are call, >> >> Your example is a little contrived because an auth module already >> checked and accepted the userid. >> >>> And even more strange, that the inclusion of a function registered with >>> FIRST, will change the order too. >> >> You're sorting a list and have specified that you don't care about the >> position of two things relative to eachother. Seems reasonable that >> their position would change as the overall contents of the list >> changes based on implementation of the sort. >> >> Don't get me wrong, being able to influence the hook ordering with >> configuration directives sounds cool (e.g. DirectiveXYZ hook_name >> mod_homegrown.c after mod_thirdparty.c) but it doesn't look like >> there's a practical problem. > > > The order in which the check_user_id hooks are called, isn't as big of an > issue as you might think. In most cases, even if another module is called > before yours, the first thing that it will do is check to make sure that > it is configured for that or and DECLINE to handle > the request if not. Keep in mind that this is an Apache 2.0 and before > issue. Apache 2.2 has solved this problem with providers. Using the > AuthBasicProvider or AuthdigestProvider directives, you can specify which > authentication providers will be called for a specific or > and in what order. Apache 2.3 goes even further to allow the > same type of thing for authorization. > > Brad >