1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
|
/* Copyright 2002-2006 The Apache Software Foundation or its licensors, as
* applicable.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#include "apr_strings.h"
#define APR_WANT_STRFUNC
#include "apr_want.h"
#include "ap_config.h"
#include "httpd.h"
#include "http_config.h"
#include "http_core.h"
#include "http_log.h"
#include "http_protocol.h"
#include "http_request.h"
typedef struct {
int authoritative;
} authn_default_config_rec;
static void *create_authn_default_dir_config(apr_pool_t *p, char *d)
{
authn_default_config_rec *conf = apr_palloc(p, sizeof(*conf));
conf->authoritative = 1; /* keep the fortress secure by default */
return conf;
}
static const command_rec authn_default_cmds[] =
{
AP_INIT_FLAG("AuthDefaultAuthoritative", ap_set_flag_slot,
(void *)APR_OFFSETOF(authn_default_config_rec,
authoritative),
OR_AUTHCFG,
"Set to 'Off' to allow access control to be passed along to "
"lower modules if the UserID is not known to this module. "
"(default is On)."),
{NULL}
};
module AP_MODULE_DECLARE_DATA authn_default_module;
static int authenticate_no_user(request_rec *r)
{
authn_default_config_rec *conf = ap_get_module_config(r->per_dir_config,
&authn_default_module);
const char *type;
/* if there isn't an auth_type, then assume that no authentication
is require so return OK */
if (!(type = ap_auth_type(r))) {
return OK;
}
/* fill in the r->user field */
if (!strcasecmp(type, "Basic")) {
const char *sent_pw;
int res;
if ((res = ap_get_basic_auth_pw(r, &sent_pw)) != OK) {
return res;
}
}
if (conf->authoritative == 0) {
return DECLINED;
}
ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r,
"access to %s failed, reason: verification of user id '%s' "
"not configured",
r->uri, r->user ? r->user : "<null>");
ap_note_auth_failure(r);
return HTTP_UNAUTHORIZED;
}
static void register_hooks(apr_pool_t *p)
{
ap_hook_check_user_id(authenticate_no_user,NULL,NULL,APR_HOOK_LAST);
}
module AP_MODULE_DECLARE_DATA authn_default_module =
{
STANDARD20_MODULE_STUFF,
create_authn_default_dir_config,/* dir config creater */
NULL, /* dir merger --- default is to override */
NULL, /* server config */
NULL, /* merge server config */
authn_default_cmds, /* command apr_table_t */
register_hooks /* register hooks */
};
|
