Mailing-List: contact modules-dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: modules-dev@httpd.apache.org
Received-SPF: pass (nike.apache.org: domain of mmwaldman@nyc.rr.com designates
 71.74.56.122 as permitted sender)
From: "Michele Waldman" <mmwaldman@nyc.rr.com>
To: <modules-dev@httpd.apache.org>
Subject: RE: Location of Apache Modules
Date: Tue, 21 Apr 2009 14:16:44 -0400
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
Thread-Index: AcnCqwZwtd+F4TSpRKGfHqdE7VT3NQAAFcdA
In-Reply-To: <1404e5910904211059g3e3f3e88saeee5a2aa82adafd@mail.gmail.com>
Message-Id: <20090421181643152.XKAI26788@hrndva-omta02.mail.rr.com>

> Did your browser send digest credentials on the ajax request?  You can
> log %{Authorization}i in the access log to quickly tell.

Yes.  The browser is sending the creditials.  I did check this.  That's what
was hanging me up.

> If credentials were sent, can mod_log_config log a %u or were they
> ignored (due to no Require, satisfy any, etc)?
> 
On the first request it's login in.

On the second request, a user is already logged in and it's not utilizing
the creditials to login, but it is using them to access the page being
called.

I'm not sure what you mean by " can mod_log_config".  Is that the file that
performs the login?  Do you think sending a header can force the new login?

Michele