CGI & auth_digest

["Timur V. Irmatov" <th...@sarkor.com>]

Hello, people!

I'm using Apache/1.3.22

Now I have a little problem configuring digest authentication.. I have
read Authentication, Authorization and Access Control section of
apache docs, created passwords and groups file..

I want my /cgi-bin/ scripts be protected by digest auth.. These are
excerpts from my httpd.conf:

<Directory /usr/local/apache/cgi-bin>
    AllowOverride None
    Options ExecCGI
    Order allow,deny
    Allow from all

#    AuthType Digest
#    AuthName billing
#    Require valid-user
#    AuthDigestFile     /usr/local/apache/conf/passwd
#    AuthDigestGroupFile        /usr/local/apache/conf/group
</Directory>

# skip

    ScriptAlias /cgi-bin/ /usr/local/apache/cgi-bin/

and when I try to visit http://host/cgi-bin/script, it prompts me for
username and password as it is supposed to.  All is well.. But if I
try to visit http://host/cgi-bin/script?param=value, it returns 400
error.. I can see following in error_log:

[Fri Mar  1 13:53:46 2002] [error] [client 192.168.15.12] Digest: uri
mismatch - </cgi-bin/script> does not match request-uri
</cgi-bin/script?param=value>

Any help or suggestions??
Thanks in advance
Timur.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org