Very Computer

Hi,

I have got authuser working as in people are asked to supply a valid
userID and password (direved hourly from the main passwd file by a perl
script run from cron as root.

But the perl program called by the browser needs to get the users ID
(The one who just logged on) and for some reason our ENV is never set
with the users ID, although the browser knows it is still a valid user.

Next is there a common cgi program that can be called when the user
clicks a logoff link in an html page to clear out the usersID and
password, so if they went back into the secure area they would be asked
to Authenticate themselves once more? Apart from closing the browser
down.

I would guess it would be SetEnv instruction, where does this go
srm.conf or access.conf?

M
--
Mark Worsdall - Oh no, I've run out of underpants :(



Web site Monitoring:-             http://www.shadow.org.uk/SiteSight/

Quote:> Next is there a common cgi program that can be called when the user
> clicks a logoff link in an html page to clear out the usersID and
> password, so if they went back into the secure area they would be asked
> to Authenticate themselves once more? Apart from closing the browser
> down.

Search deja.com for an article today about this
(comp.infosystems.www.authoring.cgi).  It's also in Nick's FAQ at
http://www.htmlhelp.org/faq/cgifaq.html

Quote:> I would guess it would be SetEnv instruction, where does this go
> srm.conf or access.conf?

No it's not a matter of setting an Environment variable on the server.  
You have to trick the browser into forgetting.  And it's completely
browser dependent.  You don't have control over the browser part of the
connection so it may or may not work.

--

On Fri, 10 Dec 1999 22:30:36 +0000, Mark Worsdall

If the CGI script is within the authenticated area, it will be in
REMOTE_USER.  If the CGI is outside the password protected area, there is
no authentication and therefore no REMOTE_USER.

I have seen logoff buttons, but not sure if it does something on the
server end or with a cookie.

--

http://www.de-srv.com/  http://cgi-help.virtualave.net/
http://thunder.prohosting.com/~cv-elgin/

Do you mean the cgi-bin path must be within the directory path of the
authenticated user?

--
Mark Worsdall - Oh no, I've run out of underpants :(



Web site Monitoring:-             http://www.shadow.org.uk/SiteSight/