www-apache-bugdb mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Joel Roller <jrol...@mediaone.net>
Subject other/6111: ab - apache bench authorization slightly broken
Date Wed, 24 May 2000 00:06:17 GMT

>Number:         6111
>Category:       other
>Synopsis:       ab - apache bench authorization slightly broken
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    apache
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Tue May 23 17:10:00 PDT 2000
>Originator:     jroller@mediaone.net
>Release:        1.3.12
Linux bunker 2.2.15 #2 Mon May 22 11:45:20 CDT 2000 i686 unknown
gcc version egcs-2.91.66 19990314/Linux (egcs-1.1.2 release)
(should be irrelevant)	
ab sends basic authorization line as:
Authorization: basic uuuencoodeddde==
instead of the proper(?):
Authorization: Basic uuuencoodeddde==
(note the capitalization)

This causes ab with authorization to fail with any web server that 
requires strict case sensitive Authorization line. (Microsoft IIS)	
Try ab on a server that requires basic authentication.  (May only fail with
Microsoft servers, others untested.)
Change 'basic' to 'Basic' in ab.c
 [In order for any reply to be added to the PR database, you need]
 [to include <apbugs@Apache.Org> in the Cc line and make sure the]
 [subject line starts with the report component and number, with ]
 [or without any 'Re:' prefixes (such as "general/1098:" or      ]
 ["Re: general/1098:").  If the subject doesn't match this       ]
 [pattern, your message will be misfiled and ignored.  The       ]
 ["apbugs" address is not added to the Cc line of messages from  ]
 [the database automatically because of the potential for mail   ]
 [loops.  If you do not include this Cc, your reply may be ig-   ]
 [nored unless you are responding to an explicit request from a  ]
 [developer.  Reply only with text; DO NOT SEND ATTACHMENTS!     ]

View raw message