auth troubles

[Mike Zimmerman <ta...@spamcop.net>]

Good morning,

	Ok, I've been knocking myself out over this for an hour, and can't seem to 
make it work.

I'm attempting to set up an auth scheme where someone with a valid username 
and password for one site can click on a link within that site to go to 
another protected site. The site they are going to also has its own members 
list that needs to be allowed access. I'm using SetEnvIfNoCase to set an 
environment variable based on the referer. The setup I'm using is like 
this, using mod_auth_mysql for the password portion:

Global:

SetEnvIfNoCase Referer members\.site1\.com allowme
SetEnvIfNoCase Referer members\.site2\.com allowme



Site 1:

<Directory />
Auth_MySQL_DB passwords
Auth_MySQL_Password_Table users
Auth_MySQL_Group_Table users
Auth_MySQL_Empty_Passwords off
Auth_MySQL_Encrypted_Passwords off
Auth_MySQL_Authoritative on
Auth_MYSQL on
AuthName "Site1 Access"
AuthType Basic
order allow,deny
allow from all
require group site1 staff
</Directory>




Site 2:

<Directory />
Auth_MySQL_DB passwords
Auth_MySQL_Password_Table users
Auth_MySQL_Group_Table users
Auth_MySQL_Empty_Passwords off
Auth_MySQL_Encrypted_Passwords off
Auth_MySQL_Authoritative on
Auth_MYSQL on
AuthName "Site2 Access"
AuthType Basic
order deny,allow
require group site2 staff
allow from env=allowme
deny from all
</Directory>


Site 1 authenticates fine, allowing users to log in. When the link to site 
2 is clicked, a password box pops up.
Logging in to site 2 on that password box shows allowme set to 1 in the 
environment variables. Setting Satisfy Any on that site removes all need 
for authentication.



As always, any help is greatly appreciated.

Thanks,

Mike


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org