[users@httpd] Using authentication provided by a third-party mechanism

[Dan Trainor <in...@hostinthebox.net>]

Hello, all -

I've seen several examples on how to implement basic authentication,
drawing usernames and passwords with anything from a simple text file,
to a large LDAP or MySQL server.  I'd like to take it one step further.

We are developing an application in-house that does a few things,
including username/password authentication.  I'd like to somehow
implement this system into Apache's existing basic authentication, in a
manner that is consistant with these other third-party authentication
modules.

For right now, something as simple as piping the username and password
as an argument to a binary that is executed every time basic
authentication is attempted, would work fine.  I almost expect that,
with the introduction of multiple authentication modules, a username and
password could be piped as arguments to an external executable would be
existant, but I'm just not sure.

Anyone have any tips and/or tricks for me?

Thanks!
-dant

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Using authentication provided by a third-party mechanism

[Joshua Slive <js...@gmail.com>]

On 6/20/05, Dan Trainor <in...@hostinthebox.net> wrote:
> Hello, all -
> 
> I've seen several examples on how to implement basic authentication,
> drawing usernames and passwords with anything from a simple text file,
> to a large LDAP or MySQL server.  I'd like to take it one step further.
> 
> We are developing an application in-house that does a few things,
> including username/password authentication.  I'd like to somehow
> implement this system into Apache's existing basic authentication, in a
> manner that is consistant with these other third-party authentication
> modules.
> 
> For right now, something as simple as piping the username and password
> as an argument to a binary that is executed every time basic
> authentication is attempted, would work fine.  I almost expect that,
> with the introduction of multiple authentication modules, a username and
> password could be piped as arguments to an external executable would be
> existant, but I'm just not sure.
> 
> Anyone have any tips and/or tricks for me?

Try:
http://www.unixpapa.com/mod_auth_external.html

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org