>Number: 893 >Category: other >Synopsis: Authentication for CGIs not always working >Confidential: no >Severity: critical >Priority: medium >Responsible: apache (Apache HTTP Project) >State: open >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Mon Jul 21 11:50:01 1997 >Originator: [EMAIL PROTECTED] >Organization: apache >Release: 1.1.3 >Environment: RH Linux 4.1, gcc 2.7.2.1. >Description: As in problem 737, I am seeing authentication failures for CGI scripts, requests are proxied, and failure is common, but not 100% repeatable.
smtpgate.gannett.com - - [21/Jul/1997:13:44:13 -0400] "POST /cgi/gancar.cgi HTTP /1.0" 401 - smtpgate.gannett.com - - [21/Jul/1997:13:44:29 -0400] "POST /cgi/gancar.cgi HTTP /1.0" 401 - smtpgate.gannett.com - gancar [21/Jul/1997:13:44:29 -0400] "POST /cgi/gancar.cgi HTTP/1.0" 200 183 The successful request was the result of a relaod, ScriptAlias /cgi/ /home/httpd/html/GC/cgi-bin/ is in srm.conf Scripts live in /home/httpd/html/GC/cgi-bin .htaccess was in GC, and now is in all directories. Access.conf contains: AllowOverried Authconfig for /home/httpd/html along with: <Directory /home/httpd/html/GC/cgi-bin> AllowOverride All Options All </Directory> CGI in question is doing HTTP file upload, browser Netcape 3.01, error message box says "A network error occured while Netscape was sending data. (Network Error: Connection aborted) Try connecting again." >How-To-Repeat: It would seem that queries coming through a proxy are more likely to trigger the event. I am unable to provide a URL, but would be happy to provide the CGI scripts and libraries. It also seems that only POSTs to enctype=multipart/form-data (HTTP file upload) trigger this. >Fix: Not at this tim >Audit-Trail: >Unformatted:
