https://bz.apache.org/bugzilla/show_bug.cgi?id=62025
Bug ID: 62025
Summary: mod_headers doesn't edit WWW-Authentication from
mod_auth_basic
Product: Apache httpd-2
Version: 2.5-HEAD
Hardware: PC
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: mod_headers
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
Created attachment 35690
--> https://bz.apache.org/bugzilla/attachment.cgi?id=35690&action=edit
Fix for editing headers from mod_auth_basic in mod_headers
Hi!
When using a directive like
"Header always edit WWW-Authenticate ^Basic SR_Basic"
in the apache configuration to fine tune mod_auth_basic functionality,
mod_headers doesn't change this header as expected.
I traced that apache adds the "WWW-Authenticate" header in mod_auth_basic.c (to
r->err_headers_out) and afterwards handles the "Header" directive in
mod_headers.c which unfortunately operates on a different copy of
r->err_headers_out in mod_headers.c:ap_headers_error_filter().
When adding a second do_headers_fixup() to ap_headers_error_filter() as done in
ap_headers_output_filter() to operate on r->headers_out also, the problem is
gone.
Some context with a similar problem description at:
https://stackoverflow.com/questions/46220113/remove-www-authenticate-header
I'm attaching a patch that fixed it for me.
Thanks!
Roland
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
