From: Rob McCool 
Newsgroups: netscape.devs-nsapi
Subject: Re: auth-group in rq->vars
Date: Wed, 27 Nov 1996 16:45:02 -0800

> I think that the main problem with auth-group is link to the check-ACL
> function :
> 
> Normally, the user authentication info is decoded by an AuthTrans
> function, which translate the "Authorization" headers into auth-user
> and auth-type. But it seems like this function does not care about
> groups, only checks that the user exists.
> 
> The only function that should use a group info is the check-ACL
> function. But even if it's a PathCheck function, it does its own
> translation of the "authorization" header, and does not care about
> previously set auth-user or auth-type. And if any group info is
> needed, it will be only internal for this function.
> 
> So I guess no function is able to give you the group information
> you need.
> 
> Tom (using Enterprise 2.0 on Solaris)

Yes, I checked with the person who would know for sure and in the 2.x
servers, the group information is manipulated internally to check-acl
and is not externally available.

--Rob

--
Rob McCool, robm@netscape.com http://home.netscape.com/people/robm/
Stunt Programmer, Netscape Communications Corporation
It was working ten minutes ago, I swear...

Reproduced by permission of the author.