The following reply was made to PR mod_cgi/609; it has been noted by GNATS.
From: Marc Slemko <[EMAIL PROTECTED]> To: David TILLOY <[EMAIL PROTECTED]> Subject: Re: mod_cgi/609: User Authentification in CGI environment Date: Thu, 22 May 1997 23:17:33 -0600 (MDT) On Thu, 22 May 1997, David TILLOY wrote: > I have an HTML document in a directory (/lab/toto.html) who call a cgi in > /cgi-bin/lab/my-cgi. To access to the toto.html file, I have a .htaccess and > .htpasswd file. You enter your name & passwd, but I have too a .htaccess in > cgi, > and this second .htaccess acceed to passwd in the same .htpasswd than > toto.html. > The problem is this : After the call of cgi (in POST method), I haven't the > REMOTE_USER define, but if I launch the CGI alone, without the toto.html > file, > the REMOTE_USER var is correctly set. I don't understand why... I am not exactly clear on what you are doing. The minimal possible config which exhibits the problem would help. Be sure you aren't using a "Limit GET" when you restrict access to the CGI. That will only restrict GETs, not POSTs.
