* [9fans] httpd/magic and authentication
@ 2006-05-26 19:37 Skip Tavakkolian
2006-05-27 0:56 ` arisawa
0 siblings, 1 reply; 7+ messages in thread
From: Skip Tavakkolian @ 2006-05-26 19:37 UTC (permalink / raw)
To: 9fans
has anyone done any cgi's that enforce digest authentication?
i need it to enforce access control to some content that needs to be
accessible by none; along these lines:
http://groups.google.com/group/comp.os.plan9/browse_thread/thread/2d0acef2e2b85d5e/8166f4c14b6f9107?q=httpd+authentication&rnum=3#8166f4c14b6f9107
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [9fans] httpd/magic and authentication
2006-05-26 19:37 [9fans] httpd/magic and authentication Skip Tavakkolian
@ 2006-05-27 0:56 ` arisawa
2006-05-27 3:04 ` Skip Tavakkolian
0 siblings, 1 reply; 7+ messages in thread
From: arisawa @ 2006-05-27 0:56 UTC (permalink / raw)
To: Fans of the OS Plan 9 from Bell Labs
Hello,
I have been hesitated to support digest authentication in Pegasus
(another httpd for Plan9),
because I have been suspicious that digest authentication is not
widely supported by browsers.
If recent browsers are supporting digest authentication, I will try
to support it in Pegasus.
By the way, I don't think digest authentication is useful in case we
want to protect some web contents from local users or other person's
CGI.
Look
http://plan9.aichi-u.ac.jp/pegasus/eman-2.0/
http://plan9.aichi-u.ac.jp/pegasus/eman-2.1/
for the solution.
Kenji Arisawa
On 2006/05/27, at 4:37, Skip Tavakkolian wrote:
> has anyone done any cgi's that enforce digest authentication?
>
> i need it to enforce access control to some content that needs to be
> accessible by none; along these lines:
>
> http://groups.google.com/group/comp.os.plan9/browse_thread/thread/
> 2d0acef2e2b85d5e/8166f4c14b6f9107?q=httpd
> +authentication&rnum=3#8166f4c14b6f9107
>
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [9fans] httpd/magic and authentication
2006-05-27 0:56 ` arisawa
@ 2006-05-27 3:04 ` Skip Tavakkolian
2006-05-27 6:30 ` arisawa
0 siblings, 1 reply; 7+ messages in thread
From: Skip Tavakkolian @ 2006-05-27 3:04 UTC (permalink / raw)
To: 9fans
Thanks.
> By the way, I don't think digest authentication is useful in case we
> want to protect some web contents from local users or other person's
> CGI.
i noticed httpdigest proto has been added to factotum. one of the
suggestions in the old thread was for each user to run its own httpd.
combining this with a change to the 'who' handler to redirect a ~user
request to the user's httpd (port↔user mapping) should do it. each
user's own httpd (probably with ssl) then challenges all incoming
requests against his/her own factotum which would have a server side
secret for httpdigest proto.
> http://plan9.aichi-u.ac.jp/pegasus/eman-2.0/
> http://plan9.aichi-u.ac.jp/pegasus/eman-2.1/
I was able to look at 2.0 version but not 2.1.
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [9fans] httpd/magic and authentication
2006-05-27 3:04 ` Skip Tavakkolian
@ 2006-05-27 6:30 ` arisawa
2006-05-27 15:41 ` Skip Tavakkolian
2006-05-27 15:52 ` Skip Tavakkolian
0 siblings, 2 replies; 7+ messages in thread
From: arisawa @ 2006-05-27 6:30 UTC (permalink / raw)
To: Fans of the OS Plan 9 from Bell Labs
Hello,
> i noticed httpdigest proto has been added to factotum.
I didn't noticed that.
The latest manual factotum(4) says nothing about httpdigest.
What browsers do you recommend to test http digest authentication ?
Mozilla is the best ?
>
>> http://plan9.aichi-u.ac.jp/pegasus/eman-2.0/
>> http://plan9.aichi-u.ac.jp/pegasus/eman-2.1/
>>
>
> I was able to look at 2.0 version but not 2.1.
>
You might have been very unlucky because my sever was powered off
while a short time for maintenance.
Kenji Arisawa
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [9fans] httpd/magic and authentication
2006-05-27 6:30 ` arisawa
@ 2006-05-27 15:41 ` Skip Tavakkolian
2006-05-27 21:19 ` arisawa
2006-05-27 15:52 ` Skip Tavakkolian
1 sibling, 1 reply; 7+ messages in thread
From: Skip Tavakkolian @ 2006-05-27 15:41 UTC (permalink / raw)
To: 9fans
> What browsers do you recommend to test http digest authentication ?
> Mozilla is the best ?
i've not verified this, but presumably all popular browsers
support it. according to apache 2.2 docs:
"As of September 2004, major browsers that support digest
authentication include Amaya, Konqueror, MS Internet Explorer
for Mac OS X and Windows (although the Windows version fails
when used with a query string -- see "Working with MS Internet
Explorer" below for a workaround), Mozilla, Netscape 7, Opera,
and Safari."
http://httpd.apache.org/docs/2.2/mod/mod_auth_digest.html
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [9fans] httpd/magic and authentication
2006-05-27 6:30 ` arisawa
2006-05-27 15:41 ` Skip Tavakkolian
@ 2006-05-27 15:52 ` Skip Tavakkolian
1 sibling, 0 replies; 7+ messages in thread
From: Skip Tavakkolian @ 2006-05-27 15:52 UTC (permalink / raw)
To: 9fans
>> i noticed httpdigest proto has been added to factotum.
> The latest manual factotum(4) says nothing about httpdigest.
it's in sources. but i read it again; server side is not
implemented :(
/sys/src/cmd/auth/factotum/httpdigest.c
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [9fans] httpd/magic and authentication
2006-05-27 15:41 ` Skip Tavakkolian
@ 2006-05-27 21:19 ` arisawa
0 siblings, 0 replies; 7+ messages in thread
From: arisawa @ 2006-05-27 21:19 UTC (permalink / raw)
To: Fans of the OS Plan 9 from Bell Labs
Thanks for your information.
I will try to implement.
Kenji Arisawa
On 2006/05/28, at 0:41, Skip Tavakkolian wrote:
>> What browsers do you recommend to test http digest authentication ?
>> Mozilla is the best ?
>
> i've not verified this, but presumably all popular browsers
> support it. according to apache 2.2 docs:
>
> "As of September 2004, major browsers that support digest
> authentication include Amaya, Konqueror, MS Internet Explorer
> for Mac OS X and Windows (although the Windows version fails
> when used with a query string -- see "Working with MS Internet
> Explorer" below for a workaround), Mozilla, Netscape 7, Opera,
> and Safari."
>
> http://httpd.apache.org/docs/2.2/mod/mod_auth_digest.html
>
^ permalink raw reply [flat|nested] 7+ messages in thread
end of thread, other threads:[~2006-05-27 21:19 UTC | newest]
Thread overview: 7+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2006-05-26 19:37 [9fans] httpd/magic and authentication Skip Tavakkolian
2006-05-27 0:56 ` arisawa
2006-05-27 3:04 ` Skip Tavakkolian
2006-05-27 6:30 ` arisawa
2006-05-27 15:41 ` Skip Tavakkolian
2006-05-27 21:19 ` arisawa
2006-05-27 15:52 ` Skip Tavakkolian
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).