I had some issues with this apache module say if I had the following config:
<Location />
Require user jbondc
</Location>
<Location /MADOLAINE >
Require user mado
</Location>
When going over to /MADOLAINE, the module would re-use cached information.
The patch checks if new auth info is provided.
# Behavior without patch (credentials re-used)
[Sat Oct 24 15:58:21 2009] [info] [client xxxxxx] mod_authenticache: valid
ticket from jbondc for /
[Sat Oct 24 15:59:54 2009] [info] [client xxxxxx] mod_authenticache: valid
ticket from jbondc for /MADOLAINE
[Sat Oct 24 15:59:54 2009] [error] [client xxxxxx] access to /MADOLAINE
failed, reason: user jbondc not allowed access
# With patch (if new username/password provided, don't use cookie)
[Sat Oct 24 15:58:21 2009] [info] [client xxxxxx] mod_authenticache: valid
ticket from jbondc for /
[Sat Oct 24 16:00:06 2009] [error] [client xxxxxx] PAM: user 'mado' - not
authenticated: authentication error
_______________________________________________
freebsd-apache@... mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-apacheTo unsubscribe, send any mail to "
freebsd-apache-unsubscribe@..."