Return-Path: 
 <apache-bugdb-return-3468-apmail-apache-bugdb-archive=apache.org@apache.org>
Delivered-To: apmail-apache-bugdb-archive@apache.org
Received: (qmail 57273 invoked by uid 500); 30 Oct 2000 15:40:09 -0000
Mailing-List: contact apache-bugdb-help@apache.org; run by ezmlm
Precedence: bulk
Reply-To: apache-bugdb@apache.org
list-help: <mailto:apache-bugdb-help@apache.org>
list-unsubscribe: <mailto:apache-bugdb-unsubscribe@apache.org>
list-post: <mailto:apache-bugdb@apache.org>
Delivered-To: mailing list apache-bugdb@apache.org
Received: (qmail 57217 invoked from network); 30 Oct 2000 15:40:06 -0000
Received: from marlborough.concentric.net (HELO marlborough.cnchost.com)
 (207.155.248.14)
  by locus.apache.org with SMTP; 30 Oct 2000 15:40:06 -0000
Received: from www1 (www1.rowe-clan.net [208.176.192.146] (may be forged))
	by marlborough.cnchost.com
	id KAA06235; Mon, 30 Oct 2000 10:40:05 -0500 (EST)
	[ConcentricHost SMTP Relay 1.10]
Errors-To: <wrowe@rowe-clan.net>
From: "William A. Rowe, Jr." <wrowe@rowe-clan.net>
To: <apache-bugdb@apache.org>, <joon@xinet.com>, <submit@bugz.apache.org>
Subject: RE: general/6744: REMOTE_USER no longer defined when user attempts to
 authenticate into a realm
Date: Mon, 30 Oct 2000 09:40:24 -0600
Message-ID: <001001c04287$b8eef4a0$92c0b0d0@roweclan.net>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0
In-Reply-To: <20001025152515.42060.qmail@locus.apache.org>
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600
X-Spam-Rating: locus.apache.org 1.6.2 0/1000/N

Are you using isapi or cgi?  Please clarify, as this is a 
crucial distinction, as mod_isapi was radically overhauled.

> >Number:         6744
> >Category:       general
> >Synopsis:       REMOTE_USER no longer defined when user 
> attempts to authenticate into a realm
> >Confidential:   no
> >Severity:       serious
> >Priority:       medium
> >Responsible:    apache
> >State:          open
> >Quarter:        
> >Keywords:       
> >Date-Required:
> >Class:          sw-bug
> >Submitter-Id:   apache
> >Arrival-Date:   Wed Oct 25 08:30:00 PDT 2000
> >Closed-Date:
> >Last-Modified:
> >Originator:     joon@xinet.com
> >Release:        1.3.14
> >Organization:
> apache
> >Environment:
> Win32: Occurs on both NT 4 SP6, and Win2k SP1 (Have not 
> tested in UN*X)
> Installed the binary release off the web site.
> >Description:
> This is change from 1.3.12.
> 
> Some of our CGI's depend on being able to determine the name 
> of the user attempting to log in to a realm defined in the 
> conf file. (We do some of our own authentication) 
> 
> Previously, we could call: getenv("REMOTE_USER") to determine 
> the name of the user. but since installing 1.3.14 the value 
> returned is NULL.
> 
> Feature? 
> >How-To-Repeat:
> The following defines the Realm in the conf file:
> 
> # WebNative cgi directory
> <Directory C:\PROGRA~1\Xinet\WEBNAT~1\bin>
> AllowOverride None
> AuthType Basic
> AuthName WebNative
> require valid-user
> AuthUserFile C:\PROGRA~1\Xinet\WEBNAT~1\Admin\apache.userfile
> Options ExecCGI
> </Directory>
> 
> When the user attempts to access a file in the directory the 
> browser's authentication dialog comes up and the user types 
> in the name and password.
> 
> The cgi used to be able to extract the user name from the 
> REMOTE_USER variable but not after installing 1.3.14.
> >Fix:
> What changed between 1.3.12 & 1.3.14?