Return-Path: 
 <users-return-47514-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: (qmail 64156 invoked from network); 3 Dec 2004 13:41:59 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199)
  by minotaur-2.apache.org with SMTP; 3 Dec 2004 13:41:59 -0000
Received: (qmail 85047 invoked by uid 500); 3 Dec 2004 13:41:16 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 85013 invoked by uid 500); 3 Dec 2004 13:41:15 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
list-post: <mailto:users@httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 84987 invoked by uid 99); 3 Dec 2004 13:41:15 -0000
X-ASF-Spam-Status: No, hits=0.0 required=10.0
	tests=
X-Spam-Check-By: apache.org
Received-SPF: pass (hermes.apache.org: local policy)
Received: from Unknown (HELO mail.icilalune.fr) (212.43.237.52)
  by apache.org (qpsmtpd/0.28) with ESMTP; Fri, 03 Dec 2004 05:41:13 -0800
Received: from localhost (localhost [127.0.0.1])
	by mail.icilalune.fr (Postfix) with ESMTP id E52ED2F892
	for <users@httpd.apache.org>; Fri,  3 Dec 2004 13:39:25 +0000 (UTC)
Received: from mail.icilalune.fr ([127.0.0.1])
 by localhost (mail.icilalune.fr [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 25710-05 for <users@httpd.apache.org>;
 Fri,  3 Dec 2004 13:39:08 +0000 (UTC)
Received: from gregxp (tuileries-2-82-66-244-63.fbx.proxad.net [82.66.244.63])
	by mail.icilalune.fr (Postfix) with SMTP id F19402F884
	for <users@httpd.apache.org>; Fri,  3 Dec 2004 13:39:07 +0000 (UTC)
From: "gregory duchesnes" <gregory@icilalune.com>
To: <users@httpd.apache.org>
Date: Fri, 3 Dec 2004 14:40:54 +0100
Message-ID: <AMEPKOLJNDAGILCNMMLMKEDHEPAA.gregory@icilalune.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="US-ASCII"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
In-Reply-To: <78EE4E23-4529-11D9-AAEC-0003938366A4@jibeya.com>
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-Virus-Scanned: by amavisd-new at mail.icilalune.fr
X-Virus-Checked: Checked
Subject: [users@httpd] POST to cgi Authentification Bug
X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N

hi all,

Prior to explain my problem let's explain my config :

I have a bunch of Vhosts (all password protected Authtype Basic + MySQL).
As i have a lot of scripts which are shared by all Vhosts, i have set up a
shared folder thanks to an alias :

Alias /shared /var/www/shared/

<Directory /var/www/shared>
    Options FollowSymLinks
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>


My Vhosts config look like that :

<VirtualHost *>
    ServerName admin.ndd.tlp
    DocumentRoot /var/www/ndd.tlp/admin/web
    CustomLog /var/www/ndd.tlp/admin/logs/access.log combined
    <LocationMatch /* >
        Authtype Basic
        AuthName "Administration"
        Auth_MySQL_DB myauthdb
        Auth_MySQL_Password_Table user_info
        Auth_MySQL_Encrypted_Passwords Off
        require valid-user
    </LocationMatch>
</VirtualHost>

I use LocationMatch to make sure anything in the website tree is protected
(including aliases such as the /shared directory) and have a simple
Vhosts.conf file
All this works perfectly well, but now problems begin...



I also have a shared cgi script folder (password protected also thanks to my
LocationMatch rule) :

ScriptAlias /upload/ /usr/lib/cgi-bin/upload/

<Directory /usr/lib/cgi-bin/upload/>
    AllowOverride None
    Options ExecCGI
    Order allow,deny
    Allow from all
</Directory>

in this upload folder, i installed the MegaUpload cgi scripts.
Those scripts consist in 2 parts :
PHP scripts (located in /var/www/shared/private/php/upload)
cgi scripts (located in /usr/lib/cgi-bin/upload/)

First i connect to the /shared/private/php/upload/upload.php page (a form
where i can choose files to upload), then when i click submit, this page
issues a POST request to /upload/upload.cgi and the cgi handles the upload
(and provide a progress bar).

The scripts work perfectly well, except in one browser... (guess which?)
... internet explorer (Bingo!)

What goes wrong is that when i click submit, the file seems to be uploaded
(the little blue progress in the status bar moves), but in fact nothing is
uploaded.
Nothing appears in the logs until i click on stop in the browser, and then i
have a nice 401 error :

82.66.244.63 - - [03/Dec/2004:14:07:26 +0100] "POST /upload/upload.cgi
HTTP/1.1" 401 397
"http://admin.ndd.tlp/shared/private/php/upload/upload.php" "Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR1.1.4322)"


I've tried to comment out my LocationMatch rule and everything works fine,
my guess is that IE doesn't send its credentials when issuing the POST
request.
Unfortunately a vast majority of my clients use this browser so i can't ask
them to change to firefox (for example).

Anyone's ever seen this? Know a workaround?
I'd like to keep my LocationMatch rule, since it simplifies greatly my
Vhosts.conf file



Thanks for your help.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org