Client Certificate Authentication

Christian Pearce <[email protected]>
Newsgroups gmane.comp.sysutils.backup.backuppc.devel
Message-ID <1757194422.22931264170743676.JavaMail.root@sophie>
Hi Craig, 

We are using x509 client certificates to authenticate against our webserver. Long story short, our user names look like this. 

/C=US/ST=state/L=local/O=organization/OU=organizational unit/CN=Christian Pearce/[email protected] 

I patched lib/CGI/Lib.pm: 

132 # 
133 # Handle LDAP uid=user when using mod_authz_ldap and otherwise untaint 
134 # 
135 $User = $1 if ( $User =~ / uid =([^,]+)/ i || $User =~ /(.*)/ ); 
136 

Can you change line 135 to look like this? 

$User   = $1 if ( $User =~ /uid=([^,]+)/i || $User =~ /emailAddress=([^@]+)/i ||  $User =~ /(.*)/ ); 



-- 



xforty technologies 
Christian Pearce 
888-231-9331 x1119 
http://xforty.com

------------------------------------------------------------------------------
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev

_______________________________________________
BackupPC-devel mailing list
[email protected]
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-devel
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.