mod_isapi/8114: ISAPI dll can't see Basic authorization string

[Pavel Fercer <bi...@infodrom.ru>]

>Number:         8114
>Category:       mod_isapi
>Synopsis:       ISAPI dll can't see Basic authorization string
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    apache
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Wed Aug 01 06:50:00 PDT 2001
>Closed-Date:
>Last-Modified:
>Originator:     biz@infodrom.ru
>Release:        1.3.20
>Organization:
apache
>Environment:
Windows NT 4 SP6A, Apache Win32 binaries
>Description:
When my ISAPI dll is in directory with restricted access (by mod_auth), it can't see Auth string. I use Borland Delphi 5.0 to compile DLL and Authorization property of TWebRequest to see Auth string; on IIS it works fine.
>How-To-Repeat:
Make New->Application->ISAPI Application project in Delphi.
Setup default handler to return Request.Authorization.
Place .htaccess file in directory with dll. This file must include such strings:
   AuthType Basic
   AuthName "restricted area"
   AuthUserFile "<way to my user file>"
   Require user <some valid user>
   Options ExecCGI
In httpd.conf AllowOverride in the root directory section must be All.
Connect to server, try execute dll in restricted directory, type valid username and password in window. You'll see empty page.
>Fix:

>Release-Note:
>Audit-Trail:
>Unformatted:
 [In order for any reply to be added to the PR database, you need]
 [to include <ap...@Apache.Org> in the Cc line and make sure the]
 [subject line starts with the report component and number, with ]
 [or without any 'Re:' prefixes (such as "general/1098:" or      ]
 ["Re: general/1098:").  If the subject doesn't match this       ]
 [pattern, your message will be misfiled and ignored.  The       ]
 ["apbugs" address is not added to the Cc line of messages from  ]
 [the database automatically because of the potential for mail   ]
 [loops.  If you do not include this Cc, your reply may be ig-   ]
 [nored unless you are responding to an explicit request from a  ]
 [developer.  Reply only with text; DO NOT SEND ATTACHMENTS!     ]