httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jeff Trawick" <traw...@gmail.com>
Subject Re: [PATCH] Case insensitive username matching for WIN32 and BS2000 (and OS2?)
Date Tue, 04 Dec 2007 18:12:03 GMT
On Dec 4, 2007 11:54 AM, Guenter Knauf <fuankg@apache.org> wrote:
> Hi Martin,
> > The usernames in WIN32 are, IIRC , case insensitive (and they are in
> > BS2000, and perhaps in OS2?).
> when authenticating against system accounts then NetWare is insensitive too.
>
> > Some of the username auth code uses tables, and thus case insensitive
> > matching, but at some places, user names are compared literally.
>
> > The appended patch tries to make these literal comparisons
> > case insensitive, too, by using strcasecmp() in place of strcmp().
> just a thought:
> if we would create a new API like ap_cmp_username() we could use a
> configure flag like AuthCmpUserCaseInSensitive, and let the user self
> control the behavior instead of having it hardcoded platform-dependent;
> f.e. I think that if you use file-based auth on Win32 why shouldnt that
> be case-sensitive if the user wants that?
> Or am I missing something here?

FWIW, z/OS "system" accounts are case insensitive too, and an auth
module which checks the system account database needs to perform case
insignificant comparisons just like telnetd or other servers would.

But I like the idea that these non-system-account auth modules perform
the same type of comparison on all platforms, and the administrator
anywhere could opt for case-insignificant comparisons where
appropriate.

Mime
View raw message