At 4:43 pm +0200 5/8/99, Martijn Pieters wrote:
At 14:44 05/08/99 , Tony McDonald wrote: Cheers Martijn,
That's really cool, it works well. Problem is I'd like to deny access to people who aren't in that domain (preferably with a dtml doc that tells them why). Is there a way of doing this?
Hmm...
Try making a user (anon?) that has an domain spec of *.*.*.* Also add a user (deny?) that has the domain spec you want to exclude.
Now you _should_ be able to distinguish between the two in your standard_html_header and redirect deny to a page telling him that access is denied...
If you find that the user anon always matches, try placing it in one the acl_users folder one step up in the hierarchy from the folder you defined deny in.
All of this untested of course =) YMMV.
Let us know if this works!
Ok, here's where I'm at: acl_users folder in the folder I want to protect has some users as well as the special user 'ValidUser' who has the domain *.ncl.ac.uk and no password. (for testing purposes I've set the domain to be nonexistantbox.ncl.ac.uk) You're right Martijn, in that I needed to put my anonymous user (called AnonUser) in the acl_users folder above. That person has domain *.*.*.* and no password. If I attempt to access the folder that has ValidUser (from a machine *not* in the correct domain, ie for this example I'm coming in from a box that isn't called 'nonexistantbox'), some code in index_html tells me that AUTHENTICATED_USER is AnonUser. If I change the ValidUser domain to be my machine, AUTHENTICATED_USER is ValidUser. Cool. So, I put some logic at the top of standard_html_header like so: <!--#if "AUTHENTICATED_USER=='AnonUser'"--> <!--#call "RESPONSE.redirect('denied')"--> <!--#/if--> <html> <head> etc etc And I *still* get the main page showing up and telling me I'm AnonUser (ie the page I get is what I should see if I'm ValidUser). Does standard_html_header do some other voodoo that isn't plainly obvious? baffled-ly, tone. ------ Dr Tony McDonald, FMCC, Networked Learning Environments Project http://nle.ncl.ac.uk/ The Medical School, Newcastle University Tel: +44 191 222 5888 Fingerprint: 3450 876D FA41 B926 D3DD F8C3 F2D0 C3B9 8B38 18A2