Hi!
I just had a really strage problem concerning user authentication and
multiple DNS names per site.
The site is configured as "site1.example.com", this is Apache's
ServerName and Midgard's host->name. But there is a "site2.example.com",
same DNS, ServerAlias in Apache. The site works ok when called
"site2.example.com", but NemeinAuth does not send the right cookie, the
cookie domain is still "site1.example.com" and thus the user is logged
out immediately.
After some digging in the NemeinAuth code I found that MidgardHost->name
of the current host is used for the cookie domain. That's really bad,
especially in this case.
So, just for the record, if anyone has similar problems, put this into
the NemeinAuth configuration to make it work again:
$auth_conf["host_override"] = $_SERVER['HTTP_HOST'];
Now, HTTP_HOST is used, which contains the site's name as it's requested
by the browser (site1... or site2...)
Nico.
--
Nico Kaiser ::
[EMAIL PROTECTED] :: http://dumm.gelaufen.de/
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
