Just a question. The normal http_auth works by making the client send the 
encoded password *everytime* for accessing files in that realm. So all an user
has to do is to close the browser after finishing to take the password of its own 
cache.
Apache itself thus doesnt maintain a cache itself.

How does apache handle authentication with the client. Internally, instead
of accessing the .htaccess/.htpasswd files, it would be consulting the ldap server.
But does it have a different mode for asking the client for a password? Or does
that part changes?

- Sandip

On Tue, Jan 29, 2002 at 02:53:46PM +0530, Rajat Bhatia spoke out thus:
> Hi,
>     I am using mod_auth_ldap  in apache to authenticate users through the ldap 
>server.
>     Now the problem is, that once a user is authenticated, it remains in cache and 
>he/she
> need not enter the password again (for the same realm)
>     I wanted to implement a kind of logout facility, on a website here. Is it 
>possible
> somehow? Can we remove a particular user from the cache that the apache module 
>maintains?
> 

-- 
Sandip Bhattacharya
sandipb @ bigfoot.com
http://www.sandipb.net
----------------------------

          ================================================
To subscribe, send email to [EMAIL PROTECTED] with subscribe in subject header
To unsubscribe, send email to [EMAIL PROTECTED] with unsubscribe in subject header
Archives are available at http://www.mail-archive.com/ilugd%40wpaa.org
          =================================================

Reply via email to