You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2009/10/21 10:31:14 UTC
DO NOT REPLY [Bug 48031] New: AuthDigestDomain seems to no work
https://issues.apache.org/bugzilla/show_bug.cgi?id=48031
Summary: AuthDigestDomain seems to no work
Product: Apache httpd-2
Version: 2.2.14
Platform: PC
OS/Version: Windows Server 2003
Status: NEW
Severity: blocker
Priority: P2
Component: mod_auth
AssignedTo: bugs@httpd.apache.org
ReportedBy: psiek@mscgva.ch
Hi,
I'm not pretty sure that it's really a bug or a documentation mis
understanding, but as have found nothing on google or here, I'm opening a bug
report.
We'd like to protect a vhost with password, with authentification against SQL
server database. After many work (many problem with an ODBC bug) it's now
working perfectly : the users can identify themserlve to enter the site. But,
for each elements in pages, the server is asking an authentification. Users do
not see it, but yopu can easily imagine the load on database.
We have tryed to use AuthDigestDomain without success.
Here is our configuration (many auth params are here for test purpose, as we do
not find any solution) :
<VirtualHost xxx.xxx.xxx.xxx:80>
ServerName APACHEMEMBERS:80
ServerAlias apachemembers.abc.def
ServerAdmin webmaster@xxxx
DocumentRoot d:/www/msc
DirectoryIndex index.htm index.html
ScriptAlias /cgi-bin/ d:/www/msc/cgi-bin/
ErrorLog D:/Apache_logs/error_logs/members-e.log
CustomLog D:/Apache_logs/%Y%m%d-members-a.log combined
<Directory d:/www/msc>
Options -Indexes +FollowSymlinks
AuthName "apacheprivate"
AuthType Digest
AuthDigestProvider dbd
AuthDigestNcCheck Off
AuthDigestDomain / /apachemembers/ http://apachemembers/
http://apachemembers.abc.def/
BrowserMatch "MSIE" AuthDigestEnableQueryStringHack=On
AuthDigestQop auth
AuthDigestAlgorithm MD5
AuthDigestNonceLifetime -1
AuthDigestNcCheck off
Require valid-user
AuthDBDUserRealmQuery "EXEC xxxx.dbo.Getyyyy @UserName = %s,
@ApplicationName = 'Web', @RightShortDescription = 'CanBrowseMembers', @Realm =
'apacheprivate'"
</Directory>
</VirtualHost>
Anyone that can turn on the light for me is welcome...
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 48031] AuthDigestDomain seems to no work
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=48031
Nick Kew <ni...@webthing.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |LATER
--- Comment #5 from Nick Kew <ni...@webthing.com> 2010-07-04 22:17:50 EDT ---
mod_authn_socache in trunk fixes the problem of database load for future
releases.
Users of 2.2 may wish to check this:
http://marc.info/?t=127672747400003&r=1&w=2
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 48031] AuthDigestDomain seems to no work
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=48031
Andrew Schulman <ap...@snkmail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |apache.org-andrex@snkmail.c
| |om
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 48031] AuthDigestDomain seems to no work
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=48031
psiek@mscgva.ch changed:
What |Removed |Added
----------------------------------------------------------------------------
Version|2.2.14 |2.2.13
--- Comment #1 from psiek@mscgva.ch 2009-10-21 02:00:08 UTC ---
This is version 2.2.13 in fact
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 48031] AuthDigestDomain seems to no work
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=48031
--- Comment #2 from Andrew Schulman <ap...@snkmail.com> 2010-06-16 14:26:12 EDT ---
I also have this problem, in Apache 2.2.3 in RHEL 5. I have
<VirtualHost *>
ServerName dev.epa-echo.gov
ServerAlias dev.epa-otis.gov
<Location />
AuthType Digest
AuthName "OTIS-ECHO development"
AuthDigestDomain http://dev.epa-echo.gov http://dev.epa-otis.gov
AuthUserFile /xxx/xxx/xxx
Require valid-user
</Location>
</VirtualHost>
The intent is that once the user logs in to either dev.epa-echo.gov or
dev.epa-otis.gov, they shouldn't have to give their password again for the
other host. But it just doesn't work. No matter how I tweak it or which
browser I use, the user is always prompted again for a password when they visit
the other host.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 48031] AuthDigestDomain seems to no work
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=48031
--- Comment #3 from Joe Orton <jo...@redhat.com> 2010-06-16 15:17:13 EDT ---
Andrew, is the browser sending the Authorization header in the request to the
"second" server, once authenticated to the first? I'm not sure any of the big
browsers actually pay attention to the domain= parameter.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 48031] AuthDigestDomain seems to no work
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=48031
--- Comment #4 from Nick Kew <ni...@webthing.com> 2010-06-16 17:30:52 EDT ---
(In reply to comment #2)
> I also have this problem, in Apache 2.2.3 in RHEL 5. I have
This is not at all the same issue, and is almost certainly not a bug.
The OP, by contrast, is a real issue: we should have a facility to run a
short-term cache of authn credentials in memory to reduce traffic to a backend
provider. I thought we had one, but it seems I may have been imagining it.
Hmmm ... google finds a mod_authn_cache at sourceforge, though I expect it's in
need of updating.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org