Hi Romain, Romain Dupre wrote: > Thanks for your answer, i changed the configuration. > > But i had another problem to access the php protected page, so i searched > into PoA.php. > . . . > test_Lcook() Function. php_protect: Location parameter of Lcook is not > valid. > I do have a lot of work... You are pretty right. The explode() usage that you describe is only applicable to PHP4 and not to PHP5. I'm afraid that, when we made the 4 and 5 versions converge (they were separated some time ago) we made the PHP4 override a compatible version... Now is corrected (I'm attaching a correct version just in case you want to check it). The CVS is now holding what will become soon phpPoA 2.0, with a simpler interface, so we have no intention of opening new branches for 1.x. > -How can i see all the protected sites under my GPoA on the accept page? The only way to do so is by means of a list you deal independently with. The AS only knows about the GPoA site, so there is no way that any PAPI component make available extra information. Bear in mind that the PoA/GPoA model is precisely intended to decouple ASes and PoAs, so it is posible to deploy them in an independent manner. > ->Maybe i can link, for each PoA, a specific page on the GPoA and then > this page redirects me to the good PoA. Could be an idea, but remember this is not part of the PAPI software. > -If i allow the access to user X for a GPoA, user X can access all the > PoAs under this GPoA, isn't it? Not necessarily. The GPoA sends individual assertions to each PoA under it (you can differentiate them with the GPoA_Rewrite directive). Each individual PoA can restrict access to the appropriate users by means of the PAPI_Filter directive, and its corresponding equivalent in phpPoA. > -I am going to see how to automaticaly redirects a user to the AS without > doing anything from a simple PoA or a PoA under a GPoA(with WAYF, i > think). Do you think it is possible to have a primary AS and redirects > automaticaly a user to a secondary AS if this primary is down (also with > WAYF)? In principle yes: The only constraint imposed on a WAYF is that it must comply to the WAYF interface that defines the way in which it receives the data from the PoA, and the way in which it has to redirect the user browser to the selected AS (described in the section on the WAYF interface in the documentation). Apart from that, your WAYF may perform any procedures you wish. Hope this helps. Best regards, -- "Esta vez no fallaremos, Doctor Infierno" Dr Diego R. Lopez Red.es - RedIRIS The Spanish NREN e-mail: [log in para visualizar] jid: [log in para visualizar] Tel: +34 955 056 621 Mobile: +34 669 898 094 -----------------------------------------