1.1 --- a/docs/ModPython/NOTES.txt Sun Feb 29 00:05:02 2004 +0000
1.2 +++ b/docs/ModPython/NOTES.txt Sun Feb 29 00:06:14 2004 +0000
1.3 @@ -32,13 +32,11 @@
1.4
1.5 Authentication/authorisation in mod_python:
1.6
1.7 -Whilst WebStack applications are permitted to send the "WWW-Authenticate"
1.8 -header to HTTP clients, Apache appears to avoid defining the current user
1.9 -unless various Auth directives have been applied to such applications in the
1.10 -httpd.conf file, and since Apache sends such authentication headers when such
1.11 -directives have been applied in the configuration, WebStack applications seem
1.12 -to have limited control over the precise circumstances of authentication
1.13 -itself.
1.14 +Apache imposes fairly strict controls over authentication, requiring the
1.15 +addition of various declarations in the configuration in order to impose
1.16 +access controls on applications, and for WebStack authenticators to be used, a
1.17 +"PythonAuthenHandler" must be declared in the application's configuration
1.18 +section.
1.19
1.20 Consequently, it is necessary to define authentication methods in the
1.21 httpd.conf file as in the following example:
1.22 @@ -48,6 +46,7 @@
1.23 <Directory "/home/paulb/Software/Python/WebStack/examples/ModPython/AuthApp">
1.24 AddHandler python-program .py
1.25 PythonHandler AuthHandler
1.26 + PythonAuthenHandler AuthHandler
1.27 PythonDebug On
1.28 AuthType Basic
1.29 AuthName "AuthResource"