Using W3-Auth groups

From: Yuri Dario (mc6530@mclink.it)
Date: Mon Dec 13 1999 - 18:24:41 EST


Hello,

yesterday I setup w3-auth security to isolate a few pages on my test
server.

So I created a new namespace (named innogroup), a couple of areas, 3
groups (innomach, innoquadri, innotek), and acls.

Every acl is like

        area: fax
        url: /fax
        acl1: group innomach, access 10.1.1.*
        acl2: group innoquadri, access 10.1.1.*
        acl3: group innotek, access 10.1.1.*

But I discovered that only members of innomach group are able to enter
private directories. So I added a few tracepoints to w3-msql auth
module (auth.c) and I discovered that w3-msql is first matching a group
using ip address with

        checkAccess(area,namespace,group) // auth.c line#437

and then uses the group field to match users

        checkUser(group, area, namespace); // auth.c line#449

Obviously only the first group can give user access.

Do you know a workaround to this problem?

I need to use name&group informations to personalize the web page.

TIA,

Bye,

        Yuri Dario

/*
 * member of TeamOS/2 - Italy
 * http://www.quasarbbs.com/yuri
 */

-------------------------------------------------------------------------
To unsubscribe, go to http://www.Hughes.com.au/extras/email/



This archive was generated by hypermail 2b30 : Mon Mar 04 2002 - 09:04:03 EST