Netscape ENTERPRISE SERVER 6.1, Руководство пользователя

Страница: 51 / 373

AuthTrans Stage
Chapter 3 Predefined SAFs and the Request Handling Process 51
The following AuthTrans-class functions are described in detail in this section:
•
basic-auth
calls a custom function to verify user name and password.
Optionally determines the user’s group.
•
basic-ncsa
verifies user name and password against an NCSA-style or
system DBM database. Optionally determines the user’s group.
•
get-sslid
retrieves a string that is unique to the current SSL session and
stores it as the
ssl-id
variable in the
Session->client
parameter block.
•
qos-handler
handles the current quality of service statistics.
basic-auth
Applicable in
AuthTrans
-class directives.
The
basic-auth
function calls a custom function to verify authorization
information sent by the client. The Authorization header is sent as part of the basic
server authorization scheme.
This function is usually used in conjunction with the PathCheck-class function
require-auth
.
Parameters
auth-type
specifies the type of authorization to be used. This should
always be
basic
.
userdb
(optional) specifies the full path and file name of the user
database to be used for user verification. This parameter will
be passed to the user function.
userfn
is the name of the user custom function to verify
authorization. This function must have been previously
loaded with
load-modules
. It has the same interface as all
the SAFs, but it is called with the user name (
user
),
password (
pw
), user database (
userdb
), and group database
(
groupdb
) if supplied, in the
pb
parameter. The user
function should check the name and password using the
database and return
REQ_NOACTION
if they are not valid. It
should return
REQ_PROCEED
if the name and password are
valid. The basic-auth function will then add
auth-type
,
auth-user
(
user
),
auth-db
(
userdb
), and
auth-password
(
pw
, Windows NT/Windows 2000 only)
to the
rq->vars pblock
.