Session Authentication in Apache HTTP Server 2.1 Justin Erenkrantz, University of California, Irvine Track: Apache Date: Wednesday, July 09 Time: 10:45am - 11:30am Location: Salon F This session introduces the new authentication and authorization module framework introduced in Apache HTTP Server 2.1. Previously, it was not possible to chain multiple authentication schemes together. This new framework allows chaining of authentication providers, which provides administrators with greater flexibility. However, this change requires rewriting older authentication modules. Therefore, this session will detail the rationale and required changes: Problems with previous model Introduce new authentication design Illustrate role of new Basic auth module (mod_auth_basic) Illustrate new provider design with rewritten core authentication modules (mod_auth_file, mod_auth_dbm) Discuss future plans for authentication and authorization modules Notes Erenkrantz, "My talk showcases new techniques for developers to write authentication modules for the Apache HTTP Server. This is an aspect that has been quite complicated in prior versions, and this new model should be easier for module writers to understand and leverage."

---

O'Reilly Home | Privacy Policy

© 2003, O'Reilly Media, Inc.