DO NOT REPLY [Bug 10678] New: - REMOTE_USER variable gets dropped when using .htaccess

[bu...@apache.org]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=10678>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=10678

REMOTE_USER variable gets dropped when using .htaccess

           Summary: REMOTE_USER variable gets dropped when using .htaccess
           Product: Apache httpd-2.0
           Version: 2.0.39
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: mod_actions
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: tk@westend.com


Hello,

I am using Apache 2.0.39, but unfortunately the REMOTE_USER environment 
variable gets lost, when limiting access by means of .htaccess. In 
contrast to this it is possible to limit the access in the httpd.conf file.

works:
  Virtual Host Config:
    <Location /dir>
        AuthType Basic
        AuthName Test
        AuthUserFile /path/to/file
        Require valid-user
    </Location>

doesn't work:
  .htaccess:
        AuthType Basic
        AuthName Test
        AuthUserFile /path/to/file
        Require valid-user

Is there a special reason, why the REMOTE_USER variable is dropped in
the second case and how can I avoid this behaviour? When trying to access
a Document in "/dir" one is asked for password as usual, but even a simple
Shell-script just writing the environment to a file, does not show the
REMOTE_USER variable. The script was configured using AddHandler and
Action.

AddHandler testhandler .test
Action testhandler /cgi-bin/testscript

"testscript" contains: 
#!/bin/sh
echo -e "Content-Type: text/plain\n\nhello world\n";
set > /tmp/testscript-output

Thanks in advance!

Ciao,
Thomas

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org