AW: apache2 + mod_fastcgi + php4 + http_auth

Hallo,

See server/util_script.c:
AP_DECLARE(void) ap_add_common_vars(request_rec *r)
....
        /*
         * You really don't want to disable this check, since it leaves you
         * wide open to CGIs stealing passwords and people viewing them
         * in the environment with "ps -e".  But, if you must...
         */
#ifndef SECURITY_HOLE_PASS_AUTHORIZATION
        else if (!strcasecmp(hdrs[i].key, "Authorization")
                 || !strcasecmp(hdrs[i].key, "Proxy-Authorization")) {
            continue;
        }
#endif

called from fcgi_protocol.c:
int fcgi_protocol_queue_env(request_rec *r, fcgi_request *fr, env_status
*env)

Erich Prchal
Siemens Austria PSE


-----Ursprüngliche Nachricht-----
Von:
fastcgi-developers-bounces+erich.prchal=siemens.at-xGejAJT2w6yOE5Ap4OspEtHuzzzSOjJt@public.gmane.org
[mailto:fastcgi-developers-bounces+erich.prchal=siemens.at-xGejAJT2w6zhSBjtrQs9ww@public.gmane.orgls
ea.net]Im Auftrag von Cybermage
Gesendet: Montag, 13. Dezember 2004 23:38
An: fastcgi-developers-xGejAJT2w6yOE5Ap4OspEtHuzzzSOjJt@public.gmane.org
Betreff: [FASTCGI] apache2 + mod_fastcgi + php4 + http_auth


hi folks,
first of all, sorry for my bad english :)
my fcgi+php setup runs fine but for php based http_auth.

== httpd.conf ==
<IfModule mod_fastcgi.c>
  AddHandler fastcgi-script .fcg

  FastCgiWrapper /usr/sbin/suexec2
  FastCgiServer /var/www/php-fcgi-scripts/nibbler/php-fcgi-starter \
    -user benjamin \
    -group users \
    -pass-header Authorization
  AddHandler php-fastcgi .php

  <Location /cgi-bin/php-fcgi-starter>
   SetHandler fastcgi-script
   Options +ExecCGI
  </Location>

  Action php-fastcgi /cgi-bin/php-fcgi-starter
  AddType application/x-httpd-php .php
</IfModule>

== php-fgi-starter ==
#!/bin/sh
PHPRC="/var/www/nibbler/conf"
export PHPRC
PHP_FCGI_CHILDREN=4
export PHP_FCGI_CHILDREN
exec /usr/bin/php-cgi

a searched a lot and thought "-pass-header Authorization" should pass
the required information to my phpscript. but it does not work.

any suggestions?

benjamin

___________________________________
fastcgi-developers mailing list
http://fastcgi.com/fastcgi-developers/

___________________________________
fastcgi-developers mailing list
http://fastcgi.com/fastcgi-developers/