Return-Path: 
 <dev-return-58801-apmail-httpd-dev-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-dev-archive@www.apache.org
Received: (qmail 97422 invoked from network); 1 Oct 2007 16:18:19 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 1 Oct 2007 16:18:19 -0000
Received: (qmail 78963 invoked by uid 500); 1 Oct 2007 16:18:02 -0000
Delivered-To: apmail-httpd-dev-archive@httpd.apache.org
Received: (qmail 78895 invoked by uid 500); 1 Oct 2007 16:18:02 -0000
Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@httpd.apache.org
list-help: <mailto:dev-help@httpd.apache.org>
list-unsubscribe: <mailto:dev-unsubscribe@httpd.apache.org>
List-Post: <mailto:dev@httpd.apache.org>
List-Id: <dev.httpd.apache.org>
Delivered-To: mailing list dev@httpd.apache.org
Received: (qmail 78884 invoked by uid 99); 1 Oct 2007 16:18:02 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 01 Oct 2007 09:18:02 -0700
X-ASF-Spam-Status: No, hits=-0.0 required=10.0
	tests=SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (athena.apache.org: local policy)
Received: from [209.133.199.10] (HELO jimsys.jagunet.com) (209.133.199.10)
    by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 01 Oct 2007 16:18:01 +0000
Received: from [127.0.0.1] (localhost [127.0.0.1])
	by jimsys.jagunet.com (Postfix) with ESMTP id C89B0B945F2
	for <dev@httpd.apache.org>; Mon,  1 Oct 2007 12:17:07 -0400 (EDT)
Mime-Version: 1.0 (Apple Message framework v752.2)
In-Reply-To: <20071001170209.63606805@grimnir>
References: <20071001000558.423652e7@grimnir>
 <20071001130335.GA10276@devsys.jaguNET.com>
 <e498c1660710010630l269f6460i9f465f37dda54abf@mail.gmail.com>
 <470107AD.2040709@apache.org> <20071001161414.0752d2e3@grimnir>
 <20071001170209.63606805@grimnir>
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-Id: <E03E912C-8905-4B2E-947B-C91845E13428@jaguNET.com>
Content-Transfer-Encoding: 7bit
From: Jim Jagielski <jim@jaguNET.com>
Subject: Re: Proxying OPTIONS *
Date: Mon, 1 Oct 2007 12:17:06 -0400
To: dev@httpd.apache.org
X-Mailer: Apple Mail (2.752.2)
X-Virus-Checked: Checked by ClamAV on apache.org


On Oct 1, 2007, at 12:02 PM, Nick Kew wrote:

> On Mon, 1 Oct 2007 16:14:14 +0100
> Nick Kew <nick@webthing.com> wrote:
>
>> RFC2616 tells us OPTIONS * is basically a simple HTTP ping,
>> which suggests it could be at a 'lower' level than authconfig
>> and always be allowed.  If there is a reason to deny it,
>> that could be by means of something analagous to TraceEnable.
>
> An option that fixes this in httpd.conf would be:
>
> --- docs/conf/httpd.conf.in     (revision 580782)
> +++ docs/conf/httpd.conf.in     (working copy)
> @@ -113,6 +113,12 @@
>      Options FollowSymLinks
>      AllowOverride None
>      Require all denied
> +
> +    # Allow OPTIONS * (simple HTTP ping)
> +    <Limit OPTIONS>
> +        Order Allow,Deny
> +        Allow from all
> +    </Limit>
>  </Directory>
>
>  #
>
> Otherwise a simple function running REALLY_FIRST
> on the access hook could check for OPTIONS.
>

Why not use a quick_handler for the OPTIONS * case?