AW: [users@httpd] Segmentation faults on graceful reload of Apache httpd with APR 1.7.0 and mod_auth_openidc

2020-03-02 Thread simon.studer
Hi Eric, Thank you for your quick reply! This information might be interesting for the developers of mod_auth_openidc. I will show them your message and report back here if we manage to solve the issue. Best, Simon -Ursprüngliche Nachricht- Von: Eric Covener Gesendet: Montag, 2.

Re: [users@httpd] mod_cgi not passing headers for authentication

2020-03-02 Thread Yann Ylavic
Sorry I meant: https://tools.ietf.org/html/rfc2617#section-2 here: > > User names never have ':', per > https://tools.ietf.org/html/rfc2617#section-3.2.2 : > > user-pass = userid ":" password > userid = * > password= *TEXT

Re: [users@httpd] mod_cgi not passing headers for authentication

2020-03-02 Thread Yann Ylavic
On Tue, Mar 3, 2020 at 12:12 AM Roderick wrote: > > Thanks, Yann! > > With this I get HTTP_AUTHORIZATION, but Unfortunately not REMOTE_USER. Sure, if httpd isn't doing auth it will not care about REMOTE_USER nor parse the Authorization header. > > If user names do not have ":", I can get the

Re: [users@httpd] mod_cgi not passing headers for authentication

2020-03-02 Thread Roderick
Thanks, Yann! With this I get HTTP_AUTHORIZATION, but Unfortunately not REMOTE_USER. If user names do not have ":", I can get the username. > On Sun, Mar 1, 2020 at 7:33 PM Roderick wrote: > > [...] > You seem to want: > https://httpd.apache.org/docs/2.4/en/mod/core.html#cgipassauth

Re: [users@httpd] mod_cgi not passing headers for authentication

2020-03-02 Thread Yann Ylavic
On Sun, Mar 1, 2020 at 7:33 PM Roderick wrote: > > I do not want apache "doing basic auth". I want to do it in the > cgi script myself, and as I understand RFC3875, the headers in > question should be passed for that purpose. You seem to want:

Re: [users@httpd] mod_cgi not passing headers for authentication

2020-03-02 Thread Jonathon Koyle
That standard states: if the client request required authentication for external access, then the server MUST set the value of this variable from the 'auth-scheme' token in the request Authorization header field. However, you are configuring Apache to NOT authenticate and therefore Apache

[users@httpd] Chrome update r80 and httpd process increase

2020-03-02 Thread Bancel, Guillaume
Dear community, With the latest release of Chrome version 80.0.3987.122 I can observe that the number of httpd processes has increased on my Linux Web server (Apache 2.2.15). When I start a web session from the browser I can see that the session stays "ESTABLISHED" (from netstat output) even

[users@httpd] Mix of JSESSIONID and ROUTEID

2020-03-02 Thread Bertrand BARRET
Hello, Context : - one Apache Web Server configured as a load balancer using HTTP MOD PROXY - 2 tomcat servers hosting applications The main application uses JSESSIONID and sometimes calls an other one which uses ROUTEID in its session cookie. The issue : sometimes the application fails because

Re: [users@httpd] Segmentation faults on graceful reload of Apache httpd with APR 1.7.0 and mod_auth_openidc

2020-03-02 Thread Eric Covener
On Mon, Mar 2, 2020 at 10:59 AM Eric Covener wrote: > > On Mon, Mar 2, 2020 at 9:50 AM wrote: > > > > Hi everyone, > > > > We have been having issues with segmentation faults on graceful restarts of > > Apache httpd in combination with the module mod_auth_openidc. > > > > After a back and forth

Re: [users@httpd] Segmentation faults on graceful reload of Apache httpd with APR 1.7.0 and mod_auth_openidc

2020-03-02 Thread Eric Covener
On Mon, Mar 2, 2020 at 9:50 AM wrote: > > Hi everyone, > > We have been having issues with segmentation faults on graceful restarts of > Apache httpd in combination with the module mod_auth_openidc. > > After a back and forth with one of the developers over on Github, we came to > the finding

[users@httpd] Segmentation faults on graceful reload of Apache httpd with APR 1.7.0 and mod_auth_openidc

2020-03-02 Thread simon.studer
Hi everyone, We have been having issues with segmentation faults on graceful restarts of Apache httpd in combination with the module mod_auth_openidc. After a back and forth with one of the developers over on Github, we came to the finding that the segmentation faults occur with version 1.7.0