You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2009/09/14 18:17:13 UTC
DO NOT REPLY [Bug 47838] New: Ability to Dynamically Inject Current
Time Into a Filter
https://issues.apache.org/bugzilla/show_bug.cgi?id=47838
Summary: Ability to Dynamically Inject Current Time Into a
Filter
Product: Apache httpd-2
Version: 2.3-HEAD
Platform: Macintosh
OS/Version: Mac OS X 10.4
Status: NEW
Severity: enhancement
Priority: P2
Component: mod_authz_ldap
AssignedTo: bugs@httpd.apache.org
ReportedBy: ray@rightsassist.com
Created an attachment (id=24261)
--> (https://issues.apache.org/bugzilla/attachment.cgi?id=24261)
Diff to allow for current server time to be injected into a filter.
I've modified some of the source from the mod_authz_ldap project
(http://authzldap.othello.ch/) and applied it to the native mod_authnz_ldap
module (http://httpd.apache.org/docs/2.2/mod/mod_authnz_ldap.html).
The code adds the ability to replace a special keyword of $t in a filter with
the current server time in the format of YYYYMMDDhhmmss.
This allows for a URL like:
AuthLDAPURL
"ldaps://server.company.com/ou=users,dc=company,dc=com?uid?sub?(expirationDate>=$tZ)"
to result in a query being sent to the server similar to:
(&(expirationDate>=200909140101Z)(uid=userj))
The code has not been heavily tested and my C skills have severely atrophied so
the code should be carefully scrutinized before committing.
The diff should be applied to modules/aaa/mod_authnz_ldap.c.
Please let me know if you have any questions. Thanks.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 47838] Ability to Dynamically Inject Current Time
Into a Filter
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=47838
--- Comment #3 from Eric Covener <co...@gmail.com> 2009-09-14 12:12:03 PDT ---
(In reply to comment #2)
> Created an attachment (id=24263)
--> (https://issues.apache.org/bugzilla/attachment.cgi?id=24263) [details]
> Better handles dollar sign in filter
>
> This version has variable declarations at the beginning of the method and
> should pass through any dollar signs ($) not followed by a dynamic tag
> (currently only t for the server timestamp).
Have you thought about the implication of the cache here?
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 47838] Ability to Dynamically Inject Current Time
Into a Filter
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=47838
Ray Gauss II <ra...@rightsassist.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #24261|0 |1
is obsolete| |
--- Comment #2 from Ray Gauss II <ra...@rightsassist.com> 2009-09-14 11:51:16 PDT ---
Created an attachment (id=24263)
--> (https://issues.apache.org/bugzilla/attachment.cgi?id=24263)
Better handles dollar sign in filter
This version has variable declarations at the beginning of the method and
should pass through any dollar signs ($) not followed by a dynamic tag
(currently only t for the server timestamp).
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 47838] Ability to Dynamically Inject Current Time
Into a Filter
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=47838
Eric Covener <co...@gmail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |covener@gmail.com
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 47838] Ability to Dynamically Inject Current Time
Into a Filter
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=47838
--- Comment #1 from Dan Poirier <po...@pobox.com> 2009-09-14 09:52:41 PDT ---
I'm not that familiar with the LDAP AAA, so somebody else might have a better
approach to solve your problem.
Just looking at the patch, C89 doesn't allow new variable declarations in the
middle of a block. Also, see if you can handle the cases where $ is followed
by a character other than 't', or $ is at the end. There should also be a way
to include a $ in the string if you really want one.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 47838] Ability to Dynamically Inject Current Time
Into a Filter
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=47838
--- Comment #4 from Ray Gauss II <ra...@rightsassist.com> 2009-09-14 12:21:16 PDT ---
Certainly administrators would have to pay careful attention to their caching
strategies and (server timezones for that matter) depending on the accuracy
needed for any sort of expiration authorization.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org