https://bz.apache.org/bugzilla/show_bug.cgi?id=57836

--- Comment #4 from George Stanchev <stanc...@hotmail.com> ---
The thing is that ISAPI doesn't return null. You pass a buffer ptr and it fills
it. In the case of absent REMOTE_USER, ISAPI sets the buffer[0]=0 and &size=0.
So essentially the caller cannot differentiate NULL from "". But they are
essentially the same thing. 

Alternatively the fix can go in Tomcat itself to NOT create CoyotePrincipal
upon "" OR null string read from AJP which is also correct.

If this was my product and I was controlling it, I'd put a fix in both places.
Given the difficulty in getting Tomcat Connector releases out, I would be happy
to open a bug against Tomcat and get a fix there which will alleviate the
issue.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to