Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (nike.apache.org: local policy)
Message-ID: <4C5B3803.60900@cnm.de>
Date: Fri, 06 Aug 2010 00:15:31 +0200
From: Marten Lehmann <lehmann@cnm.de>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
 rv:1.9.2.4) Gecko/20100608 Thunderbird/3.1
MIME-Version: 1.0
To: users@httpd.apache.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: [users@httpd] mod_auth: username is in REMOTE_USER,
 but where are the groups?

Hello,

I have a pretty standard auth setup:

.htaccess:

AuthType Basic
AuthName "restricted"
AuthUserFile /webs/.htpasswd
AuthGroupFile /webs/.htgroups

Require group readwrite

.htpasswd:

user1:.....
user2:.....

.htgroups:

readwrite: user2
readonly: user1
eat-bananas: user2

Now when I access the page, the authorization works fine and the login 
I'm using to authenticate is stored in the env-variable REMOTE_USER by 
Apache.

But where are the groups? Doesn't Apache store the groups attached to 
the user in an env-variable? This would help me a lot because my 
application needs to know which roles/groups have been assigned to the 
user. So even while for login it is only required to be of the group 
"readwrite" it would be nice to see for the application, that the user 
has additional groups like "eat-bananas".

I hope I can rely on Apache for this, although it wouldn't be that hard 
to do it on my own. I just wouldn't like to update users and 
roles/groups in both, .htaccess files and source code of application.

Kind regards
Marten

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org