mod_proxy/3776: Proxy Authentication appears to be broken

[Ian Daniel <ia...@mirkwood.demon.co.uk>]

>Number:         3776
>Category:       mod_proxy
>Synopsis:       Proxy Authentication appears to be broken
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    apache
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Tue Jan 26 16:30:01 PST 1999
>Last-Modified:
>Originator:     ian@mirkwood.demon.co.uk
>Organization:
apache
>Release:        1.3.3
>Environment:
HPUX 10.2, fully patched, gcc compiler.
>Description:
Hi,

Basically, we want to use Apache as a local server for our intranet and as a proxy, via another proxy server
to the internet. The internet proxy uses basic authentication and works fine with the CERN server, but we'd 
rather use Apache as it's got other features we want to use.

When using Apache a browser connecting to an internet site will request authentication, as it should do, the
problem is that authentication always fails. I can't give you any more information on the problem as you don't 
seem to have much in the way of debug output (the CERN server can be set to output headers etc. so you see 
what's going on e.g. Proxy-Authorize headers (are you ignoring these?)). If there's a way I can get detailed 
output I'd be interested in looking at it.
>How-To-Repeat:
Set up apache to use an authenticating proxy server.

e.g. Server_A ---------- Server_B (Basic Auth) ------ Internet

Server_A is set to send all external http requests on to Server_B who requests authentication
when first accessed.

>Fix:
No
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include <ap...@Apache.Org> in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.                                      ]
[Reply only with text; DO NOT SEND ATTACHMENTS!         ]