Re: [PATCH] Allow AuthZ providers to supply group data to other modules

[Paul Querna <pa...@querna.org>]

On Thu, Dec 31, 2009 at 9:06 AM, Christian Seiler <ch...@gmx.net> wrote:
> Hi,
>
>> My approach is thus to provide a simple mechanism within the Apache API
>> which allows any authz module to export group information to other
>> modules. With this mechanism in place, it is possible to change
>> mod_authz_svn in a way that allows it to use a generic group storage
>> that it fetches from any used Apache authz module. The change in
>> mod_authz_svn is of course not the focus of this posting.
>
> Is there nobody who wants to comment on my previous email?

Conceptually, I think this is a great idea.  I think we should do this.

The patch is quite big/monolithic though, and that discouraged me from
taking time to review it all. I'll try to dig into it this weekend
hopefully.

Thanks,

Paul

Re: [PATCH] Allow AuthZ providers to supply group data to other modules

[Christian Seiler <ch...@gmx.net>]

Hi,

Thanks for your reply!

> Conceptually, I think this is a great idea.  I think we should do this.
> 
> The patch is quite big/monolithic though, and that discouraged me from
> taking time to review it all. I'll try to dig into it this weekend
> hopefully.

If you like, I can provide a smaller patch that only contains the
user_in_group functionality and not the get_user_groups functionality.
That reduces the patch by quite a bit since most of the added lines are
LDAP related stuff in order to allow for these queries.

Regards,
Christian