www-apache-bugdb mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Paul Robertson <probe...@clark.net>
Subject other/893: Authentication for CGIs not always working
Date Mon, 21 Jul 1997 18:50:01 GMT

>Number:         893
>Category:       other
>Synopsis:       Authentication for CGIs not always working
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    apache (Apache HTTP Project)
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Mon Jul 21 11:50:01 1997
>Originator:     proberts@clark.net
>Organization:
apache
>Release:        1.1.3
>Environment:
RH Linux 4.1, gcc 2.7.2.1.  
>Description:
As in problem 737, I am seeing authentication failures for CGI scripts, 
requests are proxied, and failure is common, but not 100% repeatable.

smtpgate.gannett.com - - [21/Jul/1997:13:44:13 -0400] "POST /cgi/gancar.cgi HTTP
/1.0" 401 -
smtpgate.gannett.com - - [21/Jul/1997:13:44:29 -0400] "POST /cgi/gancar.cgi HTTP
/1.0" 401 -
smtpgate.gannett.com - gancar [21/Jul/1997:13:44:29 -0400] "POST /cgi/gancar.cgi
 HTTP/1.0" 200 183

The successful request was the result of a relaod, 
ScriptAlias /cgi/ /home/httpd/html/GC/cgi-bin/
is in srm.conf

Scripts live in /home/httpd/html/GC/cgi-bin  .htaccess was in GC, and now is in
all directories.  Access.conf contains:
AllowOverried Authconfig for /home/httpd/html

along with:

<Directory /home/httpd/html/GC/cgi-bin>
AllowOverride All
Options All
</Directory>

CGI in question is doing HTTP file upload, browser Netcape 3.01, error message
box says "A network error occured while Netscape was sending data.  (Network Error: Connection
aborted)  Try connecting again."

 
>How-To-Repeat:
It would seem that queries coming through a proxy are more likely to trigger 
the event.  I am unable to provide a URL, but would be happy to provide the
CGI scripts and libraries.  It also seems that only POSTs to 
enctype=multipart/form-data (HTTP file upload) trigger this.
>Fix:
Not at this tim
>Audit-Trail:
>Unformatted:



Mime
View raw message