mod_proxy/4693: Using fails when trying to do user authorisation

[Peter Campbell <p....@trl.oz.au>]

>Number:         4693
>Category:       mod_proxy
>Synopsis:       Using <Directory proxy:*></Directory> fails when trying to do user authorisation
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    apache
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Sun Jul  4 20:40:00 PDT 1999
>Last-Modified:
>Originator:     p.campbell@trl.oz.au
>Organization:
apache
>Release:        1.3.4
>Environment:
FreeBSD 3.1 Release, as provided with CD-ROMs from Walnut Creek.
>Description:
Have a ProxyPass setup to an internal machine.  Wish to stop access to it from the main site based on username/password.  Setup with <Directory proxy:*> fine for IP restriction, but when try adding user authorisation eg:
  AuthName "x"
  AuthType Basic
  AuthUserFile /usr/local/apache/passwd
  require user foo
then get error message when try to access site.
In IE4 get very weird "...cannot open the site ... Not enough storage is available to process this command" and in Netscape 4.5 get a 407 Proxy Authentication Required error immediately - it doesn't ask for username/password.
>How-To-Repeat:
Currently at
  http://www.elaunceston.com/hztest/
>Fix:
No.  Works with normal directories, just not Proxy, so must be some bug in this module.  Could you please email me when you know if this is a bug, & how to fix it, or if not what I'm doing wrong?
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, you need]
[to include <ap...@Apache.Org> in the Cc line and make sure the]
[subject line starts with the report component and number, with ]
[or without any 'Re:' prefixes (such as "general/1098:" or      ]
["Re: general/1098:").  If the subject doesn't match this       ]
[pattern, your message will be misfiled and ignored.  The       ]
["apbugs" address is not added to the Cc line of messages from  ]
[the database automatically because of the potential for mail   ]
[loops.  If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request from a  ]
[developer.  Reply only with text; DO NOT SEND ATTACHMENTS!     ]