perl-modperl mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Edward J. Sabol" <>
Subject Re: AuthCookieDBI and Apache 2.4
Date Wed, 20 Feb 2019 22:56:48 GMT
On Feb 20, 2019, at 11:28 AM, Michael Schout <> wrote:
> As for AuthCookieDBI, you may not even need to change it to use
> Apache2_4::AuthCookie base, as eventually I managed to get all of the
> changes needed to work togehter in Apache2::AuthCookie.  I left
> Apache2_4::AuthCookie for historical reasons, and in case further issues
> came up that would require more changes that were 2.4 exclusive.

Impressive! And good to know.

> If you aren't doing anything fancy with `require` directives, you likely
> don't need to worry about creating an Authz provider, which is where
> most of the issues are when moving to 2.4.  Looking at AuthCookieDBI, it
> does implement support for `require group`, so if you need that, you
> will need to create an Authz provider that implements it.  But if not,
> you can probably not worry about it.

Well, I definitely have to worry about it, unfortunately. We use group-based authorization
('require group foo') extensively.

Looking at your
document, we need a

PerlAddAuthzProvider group My::AuthCookieHandler->authz_group

Any pointers to a working AuthzProvider written in Perl (like for the "species" one) in your
examples? It's not perfectly clear to me how to go about that.

Many thanks,

View raw message