Mailing List Archive: [Bug 66480] AuthBasicFake does not seem to work with e.g. AuthUserFile/Require

[Bug 66480] AuthBasicFake does not seem to work with e.g. AuthUserFile/Require

Feb 19, 2023, 11:17 AM

Post #1 of 3 (137 views)

https://bz.apache.org/bugzilla/show_bug.cgi?id=66480

--- Comment #1 from Eric Covener <covener@gmail.com> ---
I tried to add a contrast between the two directives here from what I could see
in the code/comments
http://svn.apache.org/viewvc?view=revision&revision=1907762

In trunk only, SSLUserName impacts how +fakebasicauth work. But in 2.4.x.
Similar to changing the timing of the mod_auth_basic directive, it seems like
it could have an adverse affect. It probably needs to be duplicated
(SSLFakeBasicUsername) to be improved safely. Alternatively, "AuthFakeBasic
expression [early]"

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

[Bug 66480] AuthBasicFake does not seem to work with e.g. AuthUserFile/Require [ In reply to ]

bugzilla at apache

Feb 19, 2023, 6:58 PM

Post #2 of 3 (136 views)

Permalink

https://bz.apache.org/bugzilla/show_bug.cgi?id=66480

--- Comment #2 from Christoph Anton Mitterer <calestyo@scientia.org> ---
Hey Eric.

Thanks for the clarifying commits. I would have perhaps added some concrete
example directives to point out which are meant, but I guess it's also enough
like that.

I assume this also means that it would not be feasible to implement something
that actually allows it to be used in conjunction with the others?

Or would it be possible to add some functionality to mod_ssl's fakeBasicAuth to
use another value instead of the full DN? Or is there some easy mechanism for a
general username mapping (which one could then use to map form DN to username)?

Anyway, guess from my side you this can be marked fixed and closed.

Regards,
Chris.

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

[Bug 66480] AuthBasicFake does not seem to work with e.g. AuthUserFile/Require [ In reply to ]

bugzilla at apache

Feb 19, 2023, 7:21 PM

Post #3 of 3 (136 views)

Permalink

https://bz.apache.org/bugzilla/show_bug.cgi?id=66480

--- Comment #3 from Christoph Anton Mitterer <calestyo@scientia.org> ---
Thinking a bit more about it,... maybe the documentation should actually tell a
bit more, namely with which options AuthBasicFake can actually be combined.

I assume e.g. AuthName makes no sense. But is e.g. "AuthType basic" needed? Any
others that work with it?

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org