Re: external ACL

Chemolli Francesco (USI) wrote:

> Sure, I can work around it. But it's a nice feature to have IMO.
> Of course it's a matter of cost vs benefit.
> What's so hard in keeping it though? it's just a variant of the
> strict mode, just remove the IP from the cache while you deny..

I agree. Put that way it is quite easily done.

And by separating the IP check from authentication the result will
probably be a lot better than today, as a access denied error message
will be returned subject to deny_info rather than rejecting the user
credentials. Even eleminating the problem of the buggy browser.

--
Henrik