Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: neutral (athena.apache.org: local policy)
Message-ID: <477704BA.6040401@programmerq.net>
Date: Sat, 29 Dec 2007 19:38:50 -0700
From: Jeff Anderson <jefferya@programmerq.net>
User-Agent: Thunderbird 2.0.0.9 (Macintosh/20071031)
MIME-Version: 1.0
To: users@httpd.apache.org
Content-Type: multipart/signed; micalg=pgp-sha1;
 protocol="application/pgp-signature";
 boundary="------------enig3FBB22AA79D4D077CF47AA34"
Subject: [users@httpd] Authentication from within

--------------enig3FBB22AA79D4D077CF47AA34
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

=46rom what I can tell, the only way to get a user authenticated in apach=
e
is through the popup box prompting for a username and password. I don't
mind the box, but some people think that they are ugly, unprofessional,
etc...

I'd like to be able to take a web application (pick your flavor, cgi,
perl, php, mod_python, fastcgi, etc...) and authenticate to an apache
authentication mechanism. I would like to be able to make the call to
apache to execute the authentication method with supplied data. Usually
this comes in the http request packet from a user agent.

The only way I can think of that would accomplish that is to have a
javascript form send an ajax request with the user information in the
header, and I'm not 100% positive that javascript/ajax can actually do
that. I'd much rather have it be on the server side anyway.

This would solve a few problems we have at work-- we have several web
apps all with their own authentication methods. Almost all of them can
be configured to be happy about an apache user being authenticated. The
popup box would make the people upstairs in the big chairs unhappy.
Being able to tell apache from a web application running on the server
that a user is authenticated would be a marvelous solution to make
everyone happy.

If anyone has any insights, let me know.
Thanks!

Jeff Anderson


--------------enig3FBB22AA79D4D077CF47AA34
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHdwS6NycvrHdvMZ0RAuqfAJ9xHrbCZL4Y6WuTWxsSA6HwfIMCigCg2C0O
UMlYNSTfHXrc74JwTdByFzs=
=sQnQ
-----END PGP SIGNATURE-----

--------------enig3FBB22AA79D4D077CF47AA34--