Commits · 96ee894d52343ee25f15f3202a1f93139db26a62 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Dec 31, 2005

Remove the 'satisfy' directive and the ap_satisfy() and ap_requires() APIs... · 96ee894d

Bradley Nicholes authored Dec 31, 2005

Remove the 'satisfy' directive and the ap_satisfy() and ap_requires() APIs since they no longer serve a purpose

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@360207 13f79535-47bb-0310-9956-ffa450edef68

96ee894d

Dec 30, 2005

Update the module list doc · e93007de

Bradley Nicholes authored Dec 30, 2005

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@360029 13f79535-47bb-0310-9956-ffa450edef68

e93007de

Update the documentation to show the new provider based authorization · 1619602e
Bradley Nicholes authored Dec 30, 2005
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@360027 13f79535-47bb-0310-9956-ffa450edef68
```
1619602e

Add 'granted' and 'denied' arguments to the authz 'all' provider to try to... · 640ebd4d

Bradley Nicholes authored Dec 30, 2005

Add 'granted' and 'denied' arguments to the authz 'all' provider to try to mimic the previous 'allow from all' and 'deny from all' functionality

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@359936 13f79535-47bb-0310-9956-ffa450edef68

640ebd4d

If there aren't any providers configured, then just decline allowing other... · 37d5bd14

Bradley Nicholes authored Dec 30, 2005

If there aren't any providers configured, then just decline allowing other hook based authorization modules to have a crack at it

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@359935 13f79535-47bb-0310-9956-ffa450edef68

37d5bd14

If there isn't any authentication configured for the location, then do nothing and return OK · 90638f87
Bradley Nicholes authored Dec 30, 2005
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@359930 13f79535-47bb-0310-9956-ffa450edef68
```
90638f87

Remove all of the Satisfy functionality from the request handing. All the... · 684b7595

Bradley Nicholes authored Dec 30, 2005

Remove all of the Satisfy functionality from the request handing.  All the various auth hooks to be called all of the time without restriction

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@359929 13f79535-47bb-0310-9956-ffa450edef68

684b7595

Dec 29, 2005

After further review, it is determined that mod_authz_default needs to remain... · 99018dd4

Bradley Nicholes authored Dec 29, 2005

After further review, it is determined that mod_authz_default needs to remain a authz hook rather than a provider

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@359928 13f79535-47bb-0310-9956-ffa450edef68

99018dd4

First cut at converting the host based access control directives (allow, deny)... · fedf3c4c

Bradley Nicholes authored Dec 29, 2005

First cut at converting the host based access control directives (allow, deny) into authz providers. Needs testing

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@359885 13f79535-47bb-0310-9956-ffa450edef68

fedf3c4c

Dec 27, 2005

Implement the 'Reject' directive into authz. The 'Reject' directive acts just like a NOT Require. · 82b5a222
Bradley Nicholes authored Dec 27, 2005
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@359176 13f79535-47bb-0310-9956-ffa450edef68
```
82b5a222

Remove the calls to ap_some_auth_required() from the request handling to allow... · 316b3355

Bradley Nicholes authored Dec 27, 2005

Remove the calls to ap_some_auth_required() from the request handling to allow the authn and authz hooks to be called without restriction

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@359172 13f79535-47bb-0310-9956-ffa450edef68

316b3355

debugged the require_one and require_all linked list set up to make sure that... · b52b6af9

Bradley Nicholes authored Dec 27, 2005

debugged the require_one and require_all linked list set up to make sure that the lists are being created to match the logic that is layed out in the configuration file.  Also debugged the authz provider handling to make sure that the 'and/or' logic is being followed as the providers are checked and return the authorization result

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@359160 13f79535-47bb-0310-9956-ffa450edef68

b52b6af9

Dec 21, 2005

added the directives <RequireAll>, <RequireOne> and <RequireAlias> · ea0c5c05

Bradley Nicholes authored Dec 21, 2005

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@358364 13f79535-47bb-0310-9956-ffa450edef68

ea0c5c05

Dec 12, 2005

Make the authz provider changes build on NetWare · a88888b1

Bradley Nicholes authored Dec 12, 2005

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@356323 13f79535-47bb-0310-9956-ffa450edef68

a88888b1

Dec 10, 2005

initial conversion of mod_authz_default to the provider based · 7edaf23e

Bradley Nicholes authored Dec 10, 2005

authorization


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@355684 13f79535-47bb-0310-9956-ffa450edef68

7edaf23e

Remove the ap_requires API since it no longer fits with the new provider · 23581019

Bradley Nicholes authored Dec 10, 2005

based authorization architecture


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@355681 13f79535-47bb-0310-9956-ffa450edef68

23581019

Remove the AuthzXXXAuthoritative directives from all of the authz · 1746058d

Bradley Nicholes authored Dec 10, 2005

modules. This functionality will be handled by the Satify directive
when that gets refactored.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@355670 13f79535-47bb-0310-9956-ffa450edef68

1746058d

Dec 09, 2005

Initial conversion of mod_authz_dbd to provider based authorization · 5a92fc04

Bradley Nicholes authored Dec 09, 2005


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@355655 13f79535-47bb-0310-9956-ffa450edef68

5a92fc04

Initial conversion of mod_authnz_ldap to provider based authorization · d210a5b7
Bradley Nicholes authored Dec 09, 2005
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@355629 13f79535-47bb-0310-9956-ffa450edef68
```
d210a5b7

Replace the wrong get_word function with the right one. · 192784ff

Bradley Nicholes authored Dec 09, 2005


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@355627 13f79535-47bb-0310-9956-ffa450edef68

192784ff

initial conversion of mod_authz_dbm to provider based authorization · 633d1244
Bradley Nicholes authored Dec 09, 2005
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@355580 13f79535-47bb-0310-9956-ffa450edef68
```
633d1244

clean up a few loose ends · 82d21144

Bradley Nicholes authored Dec 09, 2005

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@355577 13f79535-47bb-0310-9956-ffa450edef68

82d21144

Dec 08, 2005

Initial conversion of mod_authz_groupfile to be provider based · e3cf0ef3

Bradley Nicholes authored Dec 08, 2005

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@354998 13f79535-47bb-0310-9956-ffa450edef68

e3cf0ef3

Finish initial conversion of mod_authz_owner · d0b51127

Bradley Nicholes authored Dec 08, 2005

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@354979 13f79535-47bb-0310-9956-ffa450edef68

d0b51127

Dec 07, 2005

start conversion of mod_authz_owner · 756a0754

Bradley Nicholes authored Dec 07, 2005

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@354717 13f79535-47bb-0310-9956-ffa450edef68

756a0754

· 3030f746

Bradley Nicholes authored Dec 07, 2005

Split the authz type from the arguments when the
   authz provider is registered and store the type
   in ->provider_name and the arguments in ->requirement
Move the check for METHOD_MASK out of the authz 
   providers and into the provider vector
Change the status code to AUTHZ_DENIED, AUTHZ_GRANTED
   and AUTHZ_GENERAL_ERROR   


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@354716 13f79535-47bb-0310-9956-ffa450edef68

3030f746

switch the internal names from authn to authn_core and authz to authz_core · abc2520c
Bradley Nicholes authored Dec 07, 2005
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@354699 13f79535-47bb-0310-9956-ffa450edef68
```
abc2520c

Dec 06, 2005

Add some to-do items to the list · c45c6f84

Bradley Nicholes authored Dec 06, 2005

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@354498 13f79535-47bb-0310-9956-ffa450edef68

c45c6f84

Rename mod_authn -> mod_authn_core & mod_authz -> mod_authz_core per · 75294cdc

Justin Erenkrantz authored Dec 06, 2005

discussions on list.

(This just renames the files - doesn't touch the content.)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@354490 13f79535-47bb-0310-9956-ffa450edef68

75294cdc

Add general authn and authz modules to hold non-authxxx specific directives... · 0a5e2211

Bradley Nicholes authored Dec 06, 2005

Add general authn and authz modules to hold non-authxxx specific directives such as authtype, authname and require.  Remove authtype and authname from mod_core.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@354331 13f79535-47bb-0310-9956-ffa450edef68

0a5e2211

Dec 05, 2005

Still need AUTHZ_DECLINED for now, The converted mod_authz_user is · 764d4157

Bradley Nicholes authored Dec 05, 2005

referencing it


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@354141 13f79535-47bb-0310-9956-ffa450edef68

764d4157

Dec 03, 2005

Take a quick pass through the refactored authz code. No real big changes here. · 1995ef9e

Justin Erenkrantz authored Dec 03, 2005

* modules/aaa/mod_authz_host.c: Tweak locations of some comments; reflow
  long lines; correct and simplify (I think) ap_some_auth_required logic.
* modules/aaa/mod_auth.h: Remove AUTHZ_DECLINED for now; reflow long lines;
  improve comments; remove some no longer useful comments
* modules/aaa/mod_authz_user.c: Reflow long lines and remove unneeded variable.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@351902 13f79535-47bb-0310-9956-ffa450edef68

1995ef9e

Dec 02, 2005

work out a few more bugs and now it works. Still needs some clean up and the... · 24d877a9

Bradley Nicholes authored Dec 02, 2005

work out a few more bugs and now it works.  Still needs some clean up and the rest of the authz modules need to be converted

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@351573 13f79535-47bb-0310-9956-ffa450edef68

24d877a9

Reimplement ap_some_auth_required as an optional function since the data has... · 713553e8

Bradley Nicholes authored Dec 02, 2005

Reimplement ap_some_auth_required as an optional function since the data has moved to mod_authz_host yet it is still needed by the request handler

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@351547 13f79535-47bb-0310-9956-ffa450edef68

713553e8

Dec 01, 2005

convert mod_authz_user to register its require providers · cc5fd1e8

Bradley Nicholes authored Dec 01, 2005

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@350149 13f79535-47bb-0310-9956-ffa450edef68

cc5fd1e8

Nov 30, 2005
- first cut at moving the require directive out of mod_core and implementing it as a provider vector. · 98a2f05c
  Bradley Nicholes authored Nov 30, 2005
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@349875 13f79535-47bb-0310-9956-ffa450edef68
```
  98a2f05c
Nov 29, 2005

Location for authz refactoring development · b0e2d9da

Bradley Nicholes authored Nov 29, 2005

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/authz-dev@349837 13f79535-47bb-0310-9956-ffa450edef68

b0e2d9da

Remove the problematic block which is causing problems with the latest versions · 13f0123a

Colm MacCarthaigh authored Nov 29, 2005

of MSVS. Sacrifice some borland options which don't really work anyway, and for
Borland to work, we'e really going to need a Makefile.bor.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@349833 13f79535-47bb-0310-9956-ffa450edef68

13f0123a

update transformation · 6dd8490f

Andre Malo authored Nov 29, 2005


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@349790 13f79535-47bb-0310-9956-ffa450edef68

6dd8490f

upgrading.html.fr no longer exists, but the the entry commented for reference · 7e1363a1
Andre Malo authored Nov 29, 2005
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@349788 13f79535-47bb-0310-9956-ffa450edef68
```
7e1363a1