Mailing-List: contact dev-help@perl.apache.org; run by ezmlm
Message-ID: <3A770FC3.A104CC40@chamas.com>
Date: Tue, 30 Jan 2001 11:02:27 -0800
From: Joshua Chamas <joshua@chamas.com>
Organization: NodeWorks <http://nodeworks.com>
MIME-Version: 1.0
To: Eric Cholet <cholet@logilune.com>
CC: dev@perl.apache.org
Subject: Re: get_basic_auth_pw issue
References: <1632115032.980884658@[192.168.1.2]>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Apache::ASP v 2.09, which I am working on now, will not 
collect auth info by default, but only with a special
config set, so this error message will go away.

Thanks for the detective work Eric.  For now, you can
just set AuthName.

--Josh

Eric Cholet wrote:
> 
> I recently upgraded a server using Apache::ASP,
> and now for all ASP pages I get an error in error_log:
> 
> [Tue Jan 30 19:36:46 2001] [error] [client x.y.z;t] need AuthName:
> /foo/index.asp
> 
> The page is served nevertheless. There is no authentication configured.
> 
> I believe I have tracked this down:
> 
> Apache::ASP does
> 
> sub new {
>   ...
>       # set up the environment, including authentication info
>       # only copy %ENV if we are changing anything
>       my $env;
>       if(defined $r->get_basic_auth_pw) {
>           $env = { %ENV };
> 
> mod_perl now defaults auth_type to 'Basic', so that
> when we reach ap_get_basic_auth_pw in http_protocol.c:
> 
>     if (!(t = ap_auth_type(r)) || strcasecmp(t, "Basic"))
>         return DECLINED;
> 
>     if (!ap_auth_name(r)) {
>         ap_log_rerror(APLOG_MARK, APLOG_NOERRNO|APLOG_ERR,
>                     r, "need AuthName: %s", r->uri);
>         return SERVER_ERROR;
>     }
> 
> the first test doesn't trigger anymore, and the second
> one does.
> 
> I believe this started occuring when the change was made
> to mod_perl to default auth_type to 'Basic' in revision
> 1.111 of src/modules/perl/Apache.xs.
> 
> I'm not sure what the right fix is, is it legit for
> Apache::ASP to call get_basic_auth_pw when no auth is
> configured? Maybe it should first call $r->some_auth_required
> (not sure what that does)?
> 
> --
> Eric