Skip to content
  1. Jan 16, 2006
  2. Jan 15, 2006
  3. Jan 14, 2006
  4. Jan 13, 2006
  5. Jan 12, 2006
  6. Jan 11, 2006
    • Bradley Nicholes's avatar
      Update the NetWare makefiles to build the authz code · d9da6e9c
      Bradley Nicholes authored
      git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@368105 13f79535-47bb-0310-9956-ffa450edef68
      d9da6e9c
    • William A. Rowe Jr's avatar
      · 7f036e0f
      William A. Rowe Jr authored
        Correct version numbering for generated .rc files.
      
      
      git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@368072 13f79535-47bb-0310-9956-ffa450edef68
      7f036e0f
    • Bradley Nicholes's avatar
      Authz refactoring · ce3c7628
      Bradley Nicholes authored
      Merge from branches/authz-dev
      
      Basically here is a list of what has been done:
      - Convert all of the authz modules from hook based to provider based
      - Remove the ap_requires field from the core_dir_config structure
      - Remove the function ap_requires() since its functionality is no
      longer supported or necessary in the refactoring
      - Remove the calls to ap_some_auth_required() in the core request
      handling to allow the  hooks to be called in all cases.
      - Add the new module mod_authz_core which will act as the authorization
      provider vector and contain common authz directives such as 'Require',
      'Reject' and  '<RequireAlias>'
      - Add the new module mod_authn_core which will contain common
      authentication directives such as 'AuthType', 'AuthName' and
      '<AuthnProviderAlias>'
      - Move the check for METHOD_MASK out of the authz providers and into
      the authz_core provider vector
      - Define the status codes that can be returned by the authz providers
      as AUTHZ_DENIED,  AUTHZ_GRANTED and AUTHZ_GENERAL_ERROR   
      - Remove the 'Satisfy' directive 
      - Implement the '<RequireAll>', '<RequireOne>' block directives  to
      handle the 'and' and 'or' logic for authorization.
      - Remove the 'AuthzXXXAuthoritative' directives from all of the authz
      providers
      - Implement the 'Reject' directive that will deny authorization if the
      argument is true
      - Fold the 'Reject' directive into the '<RequireAll>', '<RequireOne>'
      logic
      - Reimplement the host based authorization functionality provided by 
      'allow', 'deny' and 'order' as authz providers   
      - Remove the 'allow', 'deny' and 'order' directives      
      - Merge mod_authn_alias into mod_authn_core
      - Add '<RequireAlias>' functionality which is similar to
      '<AuthnProviderAlias>' but specific to authorization aliasing
      - Remove all of the references to the 'authzxxxAuthoritative'
      directives from the documentation
      - Remove the 'Satisfy' directive from the documentation
      - Remove 'Allow', 'Deny', 'Order' directives from the documentation
      - Document '<RequireAll>', '<RequireOne>', 'Reject' directives
      - Reimplement the APIs ap_auth_type(), ap_auth_name() as optional
      functions and move the  actual implementation into mod_authn_core
      - Reimplement the API ap_some_auth_required() as an optional function
      and move the  actual implementation into mod_authz_core
      
      Major Changes:
      - Added the directives <RequireAll>, <RequireOne>, <RequireAlias>,
      Reject
      - Expanded the functionality of the directive 'Require' to handle all
      authorization and access control
      - Added the new authz providers 'env', 'ip', 'host', 'all' to handle
      host-based access control
      - Removed the directives 'Allow', 'Deny', 'Order', 'Satisfy',
      'AuthzXXXAuthoritative'
      - Removed the ap_require() API
      - Moved the directives 'AuthType', 'AuthName' out of mod_core and into
      mod_authn_core
      - Moved the directive 'Require' out of mod_core and into
      mod_authz_core
      - Merged mod_authn_alias into mod_authn_core
      - Renamed mod_authz_dbm authz providers from 'group' and 'file-group'
      to 'dbm-group' and 'dbm-file-group'
      
      Benefits:
      - All authorization and access control is now handle through two
      directives, 'Require' and 'Reject'
      - Authorization has been expanded to allow for complex 'AND/OR' control
      logic through the directives '<RequireAll>' and '<RequireOne>'
      - Configuration is now much simpler and consistent across the board
      - Other modules like mod_ssl and mod_proxy should be able to plug into
      and take advantage of  the same provider based authorization mechanism
      by implementing their own providers
      
      Issues:
      - Backwards compatibility between 2.2 and 2.3 configurations will be
      broken in the area  of authorization and access control due to the fact
      that the directives 'allow', 'deny',  'order' and 'satisfy' have been
      removed.  When moving from 2.2 to 2.3 these directives  will have to be
      changed to 'Require all granted', 'Require all denied' or some variation
       of the authz host-based providers.
      - Existing third party authorization modules will have to adapt to the
      new structure.
      
      
      git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@368027 13f79535-47bb-0310-9956-ffa450edef68
      ce3c7628
  7. Jan 10, 2006
  8. Jan 09, 2006
  9. Jan 06, 2006
  10. Jan 05, 2006
  11. Jan 02, 2006
  12. Jan 01, 2006
    • Nick Kew's avatar
      PR#38084 · 12e9973d
      Nick Kew authored
      Correct DBDParams string in example
      INOUE Seiichiro (who reported the bug) suggests referencing the
      pgsql documentation.  I disagree, but I wonder if PgSQL is really
      a good choice of example, since it (untypically) parses the params
      itself rather than have the apr_dbd driver do it.
      
      
      
      git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@360505 13f79535-47bb-0310-9956-ffa450edef68
      12e9973d
  13. Dec 31, 2005
  14. Dec 30, 2005
    • Sander Temme's avatar
      General cleanup: · 32bd9d73
      Sander Temme authored
      * Change version number to 2.3
      * Change documentation links to new layout
      * Updated, concise but hopefully correct discussion of build system
        behaviour w.r.t. threads on FreeBSD
      * A little more discussion of buildconf and minimum libtool version on
        Darwin
      * More caveat on availability of Windows sourceballs and installers
      
      Initially submitted by pgolluci, subsequently kicked around some.
      
      
      git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@359993 13f79535-47bb-0310-9956-ffa450edef68
      32bd9d73
  15. Dec 28, 2005
  16. Dec 23, 2005
  17. Dec 21, 2005