problem with Apache2::AuthCookie

2009-07-29 Thread Brian Clarkson
I started having an odd problem with a simple subclass of Apache2::AuthCookie after a mod_perl upgrade. When authorization fails, apache apparently returns a forbidden page to the user (not just a forbidden status to the authentication hook) then fails to redirect the user back to the login page

Re: Apache::Cookie not finding cookies ...

2004-03-30 Thread Brian Clarkson
Nick Phillips wrote: On 30/03/2004, at 5:21 AM, Brian Clarkson wrote: I'm hoping that I'm doing something wrong ... I've tried the logout.pl that comes in the Apache::AuthCookie dist, but that didn't work. My code has an object that has an Apache::Request object stuf

Apache::Cookie not finding cookies ...

2004-03-29 Thread Brian Clarkson
I'm hoping that I'm doing something wrong ... I have Apache::AuthCookieDBI working for login and session expiration ( I set it to 5 minutes so that I could basically watch the session ticket expire ), but manual logout isn't working ... I've tried the logout.pl that comes in the Apache::AuthCoo

Re: Apache::AuthCookieDBI and SecretKeyFile

2004-03-26 Thread Brian Clarkson
inish the install of this, namely aliasing the /LOGIN Location to something 'outside' of the docroot ( per a thread on Apache::AuthCookie ). thanks for the help --b-- Nick Phillips wrote: On 24/03/2004, at 6:24 AM, Brian Clarkson wrote: The WhateverDBI_SecretKeyFile seems to be eve

Re: Apache::AuthCookieDBI and SecretKeyFile

2004-03-23 Thread Brian Clarkson
Nick Phillips wrote: On 24/03/2004, at 6:24 AM, Brian Clarkson wrote: The host in question is a VirtualHost. My first configuration attempt, which matches one of the more common solutions ( putting the PerlSetVar directive before the module load ) doesn't do the trick: You *must* put

Re: Apache::AuthCookieDBI and SecretKeyFile

2004-03-23 Thread Brian Clarkson
William McKee wrote: Hi Brian, I've had my share of problems with this module as well. I've found the following two solutions which I submitted to CPAN RT[1]: 1) place the PerlSetVar at the very top of your httpd.conf In the Global ENV section? Doesn't fix the issue. 2) instead of using

Apache::AuthCookieDBI and SecretKeyFile

2004-03-23 Thread Brian Clarkson
The WhateverDBI_SecretKeyFile seems to be everyone's problem with this module. I've searched around, read most people's fixes, but none of them work for me. Here's my error_log snippet: [Tue Mar 23 12:04:58 2004] [error] access to /LOGIN failed, reason: Apache::AuthCookieDBI: didn't have the

Re: AuthCookieDBI configuration woes

2004-03-15 Thread Brian Clarkson
Perrin Harkins wrote: On Thu, 2004-03-11 at 11:17, Brian Clarkson wrote: I've never used any of the AuthCookie modules, but this error is coming from apache: http://httpd.apache.org/docs/misc/FAQ.html#authauthoritative It sounds like AuthCookieDBI is returning DECLINED (or rather AuthC

Re: Apache::AuthCookie LOGIN action, where / is protected

2004-03-15 Thread Brian Clarkson
Rafael Caceres wrote: You need to make some changes to your conf: Use , otherwise you are only protecting the "/" URL. that does seem to fix the issue there. # AuthType TestCookie::AuthCookieHandler AuthName TestCookie PerlAuthenHandler TestCookie::AuthCookieHandler->authenticate Pe

Re: Apache::AuthCookie LOGIN action, where / is protected

2004-03-15 Thread Brian Clarkson
Nick Phillips wrote: On 13/03/2004, at 11:08 AM, Elizabeth Cortell wrote: I have a question for experienced Apache::AuthCookie users. The module's test suite protects directories below the docroot and sets the action of the login form to /LOGIN, an unprotected location. This setup does not

AuthCookieDBI configuration woes

2004-03-11 Thread Brian Clarkson
I've done a search through the archives, and the only related question I could find didn't include any conf. information. ' I thought I had my httpd.conf configured correctly for Apache::AuthCookieDBI. the same ( well, close to the same ) setup worked for Apache::AuthCookie the error message: