Netscape ENTERPRISE SERVER 6.1, Manual

Page: 70 / 373

PathCheck Stage
70 Netscape Enterprise Server NSAPI Programmer’s Guide • April 2002 (Draft)
Examples
load-config
Applicable in
PathCheck
-class directives.
The
load-config
function searches for configuration files in document directories
and adds the file’s contents to the server’s existing configuration. These
configuration files (also known as dynamic configuration files) specify additional
access control information for the requested resource. Depending on the rules in
the dynamic configuration files, the server might or might not allow the client to
access the requested resource.
Each directive that invokes
load-config
is associated with a base directory, which
is either stated explicitly through the
basedir
parameter or derived from the root
directory for the requested resource. The base directory determines two things:
• the top-most directory for which requests will invoke this call to the
load-config
function.
require
controls whether failure to get a client certificate will abort the HTTP
request. If
require
is absent the default value is 1.
• 1 tells the function to abort the HTTP request if the client
certificate is not present after
dorequest
is handled. In this case,
the HTTP status is set to
PROTOCOL_FORBIDDEN
, and the
function returns
REQ_ABORTED
.
• 0 tells the function to return
REQ_NOACTION
if the client
certificate is not present after dorequest is handled.
method
(optional) specifies a wildcard pattern for the HTTP methods for
which the function will be applied. If
method
is absent, the function is
applied to all requests.
bucket
optional, common to all
obj.conf
functions
# Get the client certificate from the session.
# If a certificate is not already associated with the
# session, request one.
# The request fails if the client does not present a
# valid certificate.
PathCheck fn="get-client-cert" dorequest="1"