Re: [Phplib-users] Basic authentication

[Chris J. <ch...@ch...>]

Well, I read that bit of the documentation so long ago, that I'd completely
forgotten all those points.

What I'm really trying to accomplish is 2 things:

1) Get the user name in the combined web server log.  (I use apache, and
have not had any luck with other methods.)  This is lower priority.

2)  Provide a method for users linking in from another site to have a
"single signon" capability -- that is, they logged in at the other site, and
the URL needs to contain the information that they logged in with.  As you
know, the standard URL form is something like:

 [protocol]://[username]:[password]@host.domain.name:[port]/document_path

So, uh, the username/password portion seemed like an obvious place to put
that information, and HTTP Basic Authentication would work with minimal
work.

But having re-read the Auth section of the PHPLIB docs, there are a couple
of drawbacks I don't think I want to live with:

1)  No "log out" -- well, it could be kludged by forcing a login to a
different realm, but that would be crude.

2)  No expire.  These users are accessing private data, so I'd better be
sure that people can't just wander by and use their PC's while they are out
of the office, etc.

3)  Not per page.  Not too much of a problem, since all of my Perm levels
are per directory at the moment, but could be a nuisance in the future.

So, I'm open to suggestions on how to solve my 2 problems at the top instead
of hacking Basic Auth into PHPLIB.  Any ideas?

Thanks,
..chris

----- Original Message -----
From: "Tarique Sani <ta...@sa...>" <ro...@sa...>


On Wed, 30 Jan 2002, Chris Johnson wrote:

> Has anybody modified PHPLIB to use HTTP basic authentication (i.e.
"realms")
> instead of the default standalone login page stuff?

Err ... If you read the manual you must have noted that in-line
authentication of PHPlib was written the over come the short commings of
Basic HTTP authentication

Care to explain why you want to turn the wheel back?

Tarique

--
==========================================================
PHP Applications for E-Biz : http://www.sanisoft.com
The Ultimate Ghazal Lexicon: http://www.aaina-e-ghazal.com
==========================================================