Re: Authentication by acl

By design a authentication program can only validate if the password is
correct or not. Not if the user has access to the requested resource.

2.1 has a more flexible proxy_auth ACL type which may help you.

        acl aclname proxy_auth username ...
          # list of valid usernames
          # use REQUIRED to accept any valid username.
          #
          # NOTE: when a Proxy-Authentication header is sent but it is
not
          # needed during ACL checking the username is NOT logged
          # in access.log.
          #
          # NOTE: proxy_auth requires a EXTERNAL authentication program
          # to check username/password combinations (see
          # authenticate_program).
          #

Chris Hughes wrote:
>
> Is it possible to do different user authentications based on the url a
> user is trying to get? Basically I would like to be able to pass the
> authentication program the acl the user is trying to get to.
Received on Thu Nov 12 1998 - 15:06:59 MST