Well, whether you have or haven't been keeping up with my
personal blog, I have been quite busy the past 2-3 weeks moving about 200 miles south. I'm still not settled in and my main development machine, though running, isn't exactly in an ergonomically usable state (i.e. it's sitting on the floor

).
Anyhow, Ian Bicking's
blog entry about single signon tuned me onto
mod_auth_tkt. I haven't actually tried mod_auth_tkt yet, but by all descriptions and accounts, it seems like something I'd like to use. (In fact, before my moving got serious, I was working on a single signon service for flup.org - but still hadn't quite worked out the mechanics.)
The only big problem with mod_auth_tkt is this note from the web page/readme:
NOTE: mod_auth_tkt does NOT work with Apache version 2, only with Apache 1.3.x.
Which is unfortunate, since I use Apache 2 for deployment. But really, I'm not going to let that stop me. (It
didn't stop me in the case where the Apple-supplied mod_WebObjects only supported Apache 1.3 either.

) I began porting mod_auth_tkt to Apache 2 last night.
Porting to Apache 2 is actually quite easy and mechanical, almost requiring no thought. I didn't bother using the ap*_compat.h headers though and opted to rename the types/functions to use the Apache 2 equivalent. (Maybe not a smart move, in hindsight, with regards to maintenence... doh!)
Anyway, it's compiling without warnings... but I've yet to actually try it. For some reason, I think I need to set aside a whole day to debug it... and I will probably do that sometime soon. These past few days, I've been too concerned with getting my DSL working...