mod_auth_tkt
mod_auth_tkt copied to clipboard
Lightweight single-signon authentication module for Apache
Is there any information in the licensing of `contrib/auth_ticket.inc.php`? There is neither copyright nor license information in that file.
The code to create the redirect URL (and the back URL) appears to use the HTTP headers to construct said URLs. This is vulnerable to cache-poisoning attacks isn't it? http://www.skeletonscribe.net/2013/05/practical-http-host-header-attacks.html...
Dev
Hi Gavin, thanks for this wonderful piece of software which we've been using for quite a few years now. With some pressure from Ubuntu 14 LTS to move to Apache...
This patch adds IPv6 support per the mailing list thread on the topic.