Bug#496841: libapache2-mod-auth-kerb: double WWW-Authenticate headers

2008-09-01 Thread Alexandra N. Kossovsky
After some exploration I've found that ssl is not related to this issue, but such things as DirectoryIndex as cgi script -- is related. I.e. there are situations when apache calls auth module twice per request, and in it is valid behaviour. So, mod_auth_kerb should handle this situation properly

Bug#496841: libapache2-mod-auth-kerb: double WWW-Authenticate headers with https

2008-08-27 Thread Alexandra N. Kossovsky
Package: libapache2-mod-auth-kerb Version: 5.3-5 Severity: normal Tags: patch When using kerberos authentication for https, the kerberos module adds WWW-Authenticate lines 2 times (the same configuration without https is OK). I.e., in the response to simple request (without any auth info), server