[users@httpd] apache external authentication

[James Bond <ja...@hotmail.com>]

Hi,
I am thinking of another solution for apache authentication. I have tried 
all the options for apache proxy secure authentication but it didn't work.

What I want now:
-------------------------
I want  cgi or php script which can authenticate user over https connection 
and set a header. for example AUTH="TRUE".
Once the user is autheticated successfully, thi AUTH header should be set 
and each proxy rwquest must check for this header. This header should be 
available for one browser session only and shoule expire after 1 hour of 
idle time.
If the header is no more set then my redirect rules should redirect the user 
to authntication page.

I have created the following rules. Can you please suggest if this approach 
will work? Can i  make apache to check for a header on each proxy request?

My proxy configuration:

<IfModule mod_proxy.c>
RewriteEngine on
RewriteLog "logs\rewrite_log"
RewriteLogLevel 9
RewriteCond  %{AUTH}  ^TRUE
RewriteRule  ^/$                 http://127.0.0.1/auth.html  [R,L]
ProxyRequests On
AllowConnect 443

<Proxy *>
    Order deny,allow
    Deny from all
    Allow from all

AuthType Basic
AuthName "Authentication"
AuthUserFile conf/pass
Require valid-user
Header add AUTH "TRUE"

</Proxy>

ProxyVia On
</IfModule>

Thanks
jerry

_________________________________________________________________
Stay in touch with absent friends - get MSN Messenger 
http://www.msn.co.uk/messenger


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org