I have tried two different Apache::AuthCookie subclasses:

  Apache::AuthTicket 0.31
  Apache::AuthCookieDBI 1.18

Apache::AuthCookie comes with an example login.pl, as well as does
Apache::AuthCookieDBI.

The symptom I was seeing: my browser would submit the form generated
by login.pl:

  [Wed May 22 17:05:45 2002] [error] auth_type Apache::AuthTicket
  [Wed May 22 17:05:45 2002] [error] auth_name CredTest
  [Wed May 22 17:05:45 2002] [error] ses_key_cookie 
  [Wed May 22 17:05:45 2002] [error] uri /credentials/private/index.html

I was verifing via tcpdump that my browser was sending the data via POST.

I could now wait forever, until the connection gets reset.  However,
if I got impatient, and terminated the request, I'd then see only
then that the Apache::AuthTicket handler was getting my data:

  [Wed May 22 17:05:49 2002] [error] credential_0 foo
  [Wed May 22 17:05:49 2002] [error] credential_1 bar
  [Wed May 22 17:05:49 2002] [error] ses_key
  
expires:1022102449:hash:68938c9521597c10fe1d165780b032fd:version:1:time:1022101549:user:foo

It turns out both of these example scripts use a 'POST' method; if
I change that to a 'GET' method, Apache::AuthTicket works out-of-the-box.
(I haven't re-tested Apache::AuthCookieDBI.)

I have no idea why POST _doesn't_ work, mind you...

Just an FYI to the public at large...

(Just wasted a day chasing crap with tcpdump, trying to track this
one down...)

-- 
Brian 'you Bastard' Reichert            <[EMAIL PROTECTED]>
37 Crystal Ave. #303                    Daytime number: (603) 434-6842
Derry NH 03038-1713 USA                 Intel architecture: the left-hand path

Reply via email to