[PATCH] FreeBSD Port: www/mod_authenticache

[Jonathan Bond-Caron]

I had some issues with this apache module say if I had the following config:

 

<Location />

    Require user jbondc

</Location>

 

<Location /MADOLAINE >

    Require user mado

</Location> 

 

When going over to /MADOLAINE, the module would re-use cached information.
The patch checks if new auth info is provided. 

 

# Behavior without patch (credentials re-used)

 

[Sat Oct 24 15:58:21 2009] [info] [client xxxxxx] mod_authenticache: valid
ticket from jbondc for /

[Sat Oct 24 15:59:54 2009] [info] [client xxxxxx] mod_authenticache: valid
ticket from jbondc for /MADOLAINE

[Sat Oct 24 15:59:54 2009] [error] [client xxxxxx] access to /MADOLAINE
failed, reason: user jbondc not allowed access

 

# With patch (if new username/password provided, don't use cookie)

[Sat Oct 24 15:58:21 2009] [info] [client xxxxxx] mod_authenticache: valid
ticket from jbondc for /

[Sat Oct 24 16:00:06 2009] [error] [client xxxxxx] PAM: user 'mado' - not
authenticated: authentication error

 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: check_user.patch
Type: application/octet-stream
Size: 987 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-apache/attachments/20091024/0d87a4d9/check_user.obj