Hi, I either have the strangest issue or else I've made a blindingly
obvious error.

I'm trying to protect a directory using Apache2::AuthCookieDBI using the
following .htaccess (I have to use htaccess)

--------------------
PerlModule Apache2::AuthCookieDBI
PerlSetVar berlinPath /berlin/
PerlSetVar berlinLoginScript /login.pl

PerlSetVar berlinSessionTimeout +2h

PerlSetVar berlinDBI_DSN "DBI:mysql:database=berlin"
PerlSetVar berlinDBI_SecretKey "secret"

# DBI access stuff...
PerlSetVar berlinDBI_User "user"
... etc ...

# Protected by AuthCookieDBI.
 AuthType Apache2::AuthCookieDBI
 AuthName berlin
 PerlAuthenHandler Apache2::AuthCookieDBI->authenticate
 PerlAuthzHandler Apache2::AuthCookieDBI->authorize
 require valid-user

# Login location.
<Files LOGIN>
 AuthType Apache2::AuthCookieDBI
 AuthName berlin
 SetHandler perl-script
 PerlHandler Apache2::AuthCookieDBI->login
</Files>
--------------------

When I go to my protected URL www.myserver.com/berlin/ I am presented
with the login form which I've added some status variables to, the
status is that there is no cookie present, which is to be expected since
nothing has been set yet.  Once I send authentication variables I am
still not logged in and I'm given a new URL
www.myserver.com/berlin/LOGIN which is still expected behaviour, but the
 status variable is still "no cookie" which means no cookie is being
set.  This makes me suspect that I am just dumb and doing something
super-basic wrong, but I can't figure it out.

Ultimately I just need to protect the *.pl files in that directory and
if I wrap the Auth section in:

<Files ~ "\.(pl)$">
</Files?

then calls to www.myserver.com/berlin/index.pl are challenged and
actually the authentication works fine, BUT then the index isn't
protected: www.myserver.com/berlin/ leaving me to wonder how on earth to
protect the index.  I didn't want to ask anyone because this seems like
such a trivial and n00b issue but for the life of me I can't figure it out.

So I'd be really happy with one of two solutions, either how to protect
the index, even just cause it to redirect to index.pl, or some deeper
help with the htaccess file above.

Thanks to everyone!

Tosh

--
McIntosh Cooey - Twelve Hundred Group LLC - http://www.1200group.com/

Reply via email to