Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (nike.apache.org: local policy)
Message-ID: <4744703C.6060406@csr.com>
Date: Wed, 21 Nov 2007 17:51:56 +0000
From: Arne Heizmann <Arne.Heizmann@csr.com>
User-Agent: Thunderbird 2.0.0.9 (Windows/20071031)
MIME-Version: 1.0
To: users@httpd.apache.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: [users@httpd] SSPI auth Optional?


Hi,

I'm not sure if this is at all possible, so correct me if I'm chasing a 
ghost... I'm in the following situation:

We have a system which already has an authentication mechanism (using 
cookies). We want to change this so that it uses mod_sspi, like this:

   <Location />
     AuthName "website name goes here"
     AuthType SSPI
     SSPIAuth On
     SSPIAuthoritative On
     SSPIOfferBasic On
     SSPIBasicPreferred Off
     Require valid-user
   </Location>

However, we also have automated scripts accessing the same server, and 
we don't want to have to change them all, so we want the SSPI 
authentication to be _optional_.

Unfortunately it appears that if I remove the "Require valid-user" line, 
the browser doesn't send the authentication credentials at all (doesn't 
even prompt the user).

Is it at all possible to have a system where the username/password box 
pops up in the browser, but if the user presses Cancel, the website is 
still viewable (in my case a PHP script which would then output the 
Access Denied message as appropriate)?

Thanks!
Arne

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org