On Tue, Mar 3, 2020 at 12:12 AM Roderick <hru...@gmail.com> wrote:
>
> Thanks, Yann!
>
> With this I get HTTP_AUTHORIZATION, but Unfortunately not REMOTE_USER.

Sure, if httpd isn't doing auth it will not care about REMOTE_USER nor
parse the Authorization header.

>
> If user names do not have ":", I can get the username.

User names never have ':', per
https://tools.ietf.org/html/rfc2617#section-3.2.2 :

      user-pass   = userid ":" password
      userid      = *<TEXT excluding ":">
      password    = *TEXT

Nothing special in httpd when it does auth, REMOTE_USER is extracted
from the Authorization header (HTTP_AUTHORIZATION) as "everything
before the first ':'". Your CGI has to do the same thing if it's
responsible for the auth.

Regards,
Yann.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Reply via email to