DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://issues.apache.org/bugzilla/show_bug.cgi?id=38325>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=38325 [EMAIL PROTECTED] changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|INVALID | ------- Additional Comments From [EMAIL PROTECTED] 2006-03-17 21:09 ------- Fair enough - maybe it would be better to use AUTH_TYPE & REMOTE_USER variables defined in CGI. I use REDIRECT_AUTH_TYPE only for symmetry with REDIRECT_REMOTE_USER which Apache already defines My point is when authentication is defined on a resource using AuthType, authentication which takes place should be described in AUTH_TYPE & REMOTE_USER variables - as per CGI & usual Apache behavior But in the common case that mod_actions defines a handler or interpreter, AUTH_TYPE & REMOTE_USER are blank - even though authentication takes place In this case Apache defines REDIRECT_REMOTE_USER - for good reason: Otherwise it would be impossible to work around blank REMOTE_USER & determine the authenticated username But since Apache doesn't also define REDIRECT_AUTH_TYPE it is impossible to work around blank AUTH_TYPE Use AUTH_TYPE & REMOTE_USER or REDIRECT_AUTH_TYPE & REDIRECT_REMOTE_USER - just please let AUTH_TYPE be determined when authentication is defined on a resource & mod_actions defines a handler or interpreter. This problem has stung me several times with different configurations This small patch extends Apache's current REDIRECT_REMOTE_USER approach to AUTH_TYPE - http://cgi.sfu.ca/~jdbates/tmp/apache/200603160/patch -- Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
