https://issues.apache.org/bugzilla/show_bug.cgi?id=47327

           Summary: remote_user not logged in apache logfile
           Product: Tomcat Connectors
           Version: 1.2.28
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: mod_jk
        AssignedTo: dev@tomcat.apache.org
        ReportedBy: m.kof...@gmx.net
                CC: m.kof...@gmx.net


Created an attachment (id=23769)
 --> (https://issues.apache.org/bugzilla/attachment.cgi?id=23769)
make remote_user appear in apache access_log

Apache 2.2 (with no mo_auth_* compiled) does not log remote_user in its
logifles if authentication is done by tomcat only. JkEnvVar REMOTE_USER does
only forward usernames from apache to tomcat but not the other way round.

For audit reasons, it's wothwile to have username in the primarily logile,
because '-' is logged otherwise which implies missconfiguration of tomcat.

The attached patch decoeds authentication header (http basic only!) itself if
it's not already done by apache, because jk_ws_service_t->remote_user is not
set by tomcat to inform mod_jk likewise. But actually, I would like to have
mod_jk logging the user tomcat sees, so the patch is only some kind of
workaround!

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to