httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Sean T Allen <>
Subject Re: [users@httpd] AuthConfig causing exsessive login requests
Date Thu, 30 Dec 2004 05:56:51 GMT
Are you saying every new visit?
or during the same browser session?

Shannon Eric Peevey wrote:

> Paul Simon wrote:
>> Every time I go here it askes for authentication as if it is
>> authenticating every item it accesses.  I haven't been able to isolate
>> how to resolve this.
>> Here is relevant cod:
>> <Directory "/var/www/html/ncc">
>>        AllowOverride AuthConfig
>>        AuthType Basic
>>        AuthName "Network Control Center"
>>        AuthUserFile /etc/httpd/passwords
>>        Require valid-user
>> </Directory>
> This is the nature of HTTP as a stateless protocol.  It cannot 
> remember if the user is authenticated between requests, and so must 
> authenticate every time that a new object is accessed.
> Some modules, such as mod_auth_ldap have a caching feature that will 
> remember the user, easing the load on your authication server, but I 
> don't think that mod_auth, (the "built-in" Apache authentication 
> module), offers that.
> You could look to a programming language alternative to offer caching 
> for requests, such as with mod_perl, PHP, etc.
> good luck,

View raw message