[users@httpd] mod_ssl env var to uniquely identify client certificate (sha1 fingerprint ?)

2022-06-07 Thread Thomas Fazekas
Right off the bat, I want to point out that this is NOT a bug report but rather a feature request/proposal (I don't know whether this is allowed or not ... my apologies if it isn't) In a nutshell what I would like to have is in the SSL environment variables a new variable that uniquely identifies

Re: [users@httpd] nod_session SessionMaxAge

2022-06-06 Thread Thomas Fazekas
; > > It looks to me like you don't actually have an authentication > requirement, so when your session expires it doesn't trigger a redirect to > your login form. Try protecting the cgi or some larger scope with e.g. > 'require valid-user' > > > > On

Re: [users@httpd] nod_session SessionMaxAge

2022-06-05 Thread Thomas Fazekas
t looks to me like you don't actually have an authentication requirement, > so when your session expires it doesn't trigger a redirect to your login > form. Try protecting the cgi or some larger scope with e.g. 'require > valid-user' > > On Sun, Jun 5, 2022, 6:00 AM

[users@httpd] nod_session SessionMaxAge

2022-06-05 Thread Thomas Fazekas
Dear all, either I misunderstood how the SessionMaxAge setting is supposed to work or I made a fundamental mistake in my setup, but, in a nutshell, it seems that the users can access the form protected (form_auth) folder even after the session has expired. I have the following related setup :

[users@httpd] mod_ssl certificate (mutual) authentication

2021-08-29 Thread Thomas Fazekas
OS : Debian 10.9 Apache : 2.4.38 (from repo) I presume I've missed something (obvious) in the doc, but the following setup doesn't work for me and I believe it should : Options Indexes AllowOverride None SSLVerifyClient require SSLVerifyDepth 5 SSLOptions +StdEnvVars +ExportCertData +FakeBasicAu

[users@httpd] Client certificate authentication against (Open)LDAP server

2020-12-11 Thread Thomas Fazekas
OS : Debian 10.7 Apache HTTPD : 2.4.38 (from standard repo) Dear, my setup is as follows : above mentioned Apache connecting to OpenLDAP. User basic authentication (username/password) already works (against LDAP inetOrgPerson structure) What I would like to achieve is to have user certificates i

Re: [EMAIL PROTECTED] svn access via apache with ntlm authentication

2007-10-22 Thread Thomas Fazekas
n Besien <[EMAIL PROTECTED]> wrote: > On 10/21/07, Joshua Slive <[EMAIL PROTECTED]> wrote: > > On 10/20/07, Thomas Fazekas <[EMAIL PROTECTED]> wrote: > > > In coclusion, svn with NTLM authentication doesn't work... > > > My problem is that I can'

Re: [EMAIL PROTECTED] svn access via apache with ntlm authentication

2007-10-20 Thread Thomas Fazekas
In coclusion, svn with NTLM authentication doesn't work... My problem is that I can't see any other solution how to bring together a linux based apache/svn with our NT4 based domain :( For the time being I'm just gonna go with win based NT server, it is dissapointing though that I didn't get any r

[EMAIL PROTECTED] svn access via apache with ntlm authentication

2007-10-17 Thread Thomas Fazekas
My setup : Debian Etch i386 httpd-2.0.61 configured with the following command "./configure --prefix=/opt/httpd-2.0.61 --with-mpm=worker --enable-so --enable-dav=shared --enable-unique-id=shared --enable-version=shared --enable-ssl=shared --enable-info=shared --enable-cgi=shared --enable-rewrite=