Return-Path: Delivered-To: apmail-httpd-modules-dev-archive@minotaur.apache.org Received: (qmail 48186 invoked from network); 13 Apr 2009 16:48:23 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 13 Apr 2009 16:48:23 -0000 Received: (qmail 92124 invoked by uid 500); 13 Apr 2009 16:48:22 -0000 Delivered-To: apmail-httpd-modules-dev-archive@httpd.apache.org Received: (qmail 92064 invoked by uid 500); 13 Apr 2009 16:48:22 -0000 Mailing-List: contact modules-dev-help@httpd.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: modules-dev@httpd.apache.org Delivered-To: mailing list modules-dev@httpd.apache.org Received: (qmail 92054 invoked by uid 99); 13 Apr 2009 16:48:22 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 13 Apr 2009 16:48:22 +0000 X-ASF-Spam-Status: No, hits=2.4 required=10.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_NEUTRAL X-Spam-Check-By: apache.org Received-SPF: neutral (nike.apache.org: local policy) Received: from [212.159.7.35] (HELO relay.ptn-ipout01.plus.net) (212.159.7.35) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 13 Apr 2009 16:48:12 +0000 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AgMFANsJ40nUnw6S/2dsb2JhbACCKSyJFQbBCIN8Bg Received: from ptb-relay02.plus.net ([212.159.14.146]) by relay.ptn-ipout01.plus.net with ESMTP; 13 Apr 2009 17:47:52 +0100 Received: from [81.174.172.105] (helo=VAIOLaptop) by ptb-relay02.plus.net with smtp (Exim) id 1LtPK3-0005Jh-Vi for modules-dev@httpd.apache.org; Mon, 13 Apr 2009 17:47:52 +0100 Message-ID: <438894D993144C9085777DCFBDD128F2@VAIOLaptop> From: "Markus Moeller" To: Subject: Module order for authentication/authorization Date: Mon, 13 Apr 2009 17:47:48 +0100 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_1F69_01C9BC5F.F57DB0E0" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Windows Mail 6.0.6001.18000 X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049 X-Plusnet-Relay: 47b75f713c47b32637f508ff115514f0 X-Virus-Checked: Checked by ClamAV on apache.org ------=_NextPart_000_1F69_01C9BC5F.F57DB0E0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable How can I make sure that an authentication/authorisation module is = always the the last ? I was thinking of the following case order (e.g. = mapping is always after authentication, but before authorisation): Kerberos authentication -> gives user@REALM ldap authentication -> gives user basic authentication -> gives user mapping authenticated users (e.g. user@REALM to user) =20 authorisation based on user or group. Thank you Markus ------=_NextPart_000_1F69_01C9BC5F.F57DB0E0--