andrew at morphoss
Mar 25, 2012, 4:44 PM
Post #4 of 4
(264 views)
Permalink
|
|
Re: [DAViCal-general] HTTP Auth: Digest authentication
[In reply to]
|
|
On Sat, 2012-03-24 at 15:15 +1300, Neil Ramsay wrote:
> Sorry, I should have been more specific.
> I am attempting to get Apache to do HTTP digest authentication, and then
> have DAViCal accept that user.
>
> I have tried following the instructions on,
> http://wiki.davical.org/w/Configuration/Authentication_Settings
> but I cannot get it to pass-through.
>
> Suggestions?
Can you be a little more specific? How are you running PHP from within
Apache? Is it the standard libapache2-mod-php5 or equivalent, or are
you using FastCGI or FCGI?
The line on the wiki suggesting:
$c->authenticate_hook['server_auth_type'] = array('Negotiate','Basic');
will probably need more elements in that array for Digest - the word
'Digest' springs to mind, but it might not be the only one :-)
I doubt this is a frequently used piece of code and I suspect that
you'll eventually need to add some debugging
into /usr/share/davical/inc/HTTPAuthSession.php to see what exactly is
happening. There could well be bugs.
Note that even when you do get this going this will require the user's
account to be pre-created in DAViCal - just that any password in there
will be ignored.
Just looking at this code in HTTPAuthSession.php again it all seems
remarkably baroque and old and could do with a rewrite - it must have
been written five or more years ago now. In particular the constructor
method should probably switch based on a configuration setting rather
than working it out based on what variables are available to it.
I hope this is some help, but I suspect it's not enough :-)
If you're on IRC sometime join us in #davical on irc.oftc.net [1]
Cheers,
Andrew.
[1] Though my availability is restricted for the next few weeks as
Heather is in surgery tomorrow and will be recovering for the next six
weeks...
--
------------------------------------------------------------------------
andrew (AT) morphoss (DOT) com +64(272)DEBIAN
QOTD:
"It's been real and it's been fun, but it hasn't been real fun."
------------------------------------------------------------------------
|
neil_ramsay.vcf
