On Tue, Mar 3, 2020 at 12:12 AM Roderick <[email protected]> wrote:
>
> Thanks, Yann!
>
> With this I get HTTP_AUTHORIZATION, but Unfortunately not REMOTE_USER.

Sure, if httpd isn't doing auth it will not care about REMOTE_USER nor
parse the Authorization header.

>
> If user names do not have ":", I can get the username.

User names never have ':', per
https://tools.ietf.org/html/rfc2617#section-3.2.2 :

      user-pass   = userid ":" password
      userid      = *<TEXT excluding ":">
      password    = *TEXT

Nothing special in httpd when it does auth, REMOTE_USER is extracted
from the Authorization header (HTTP_AUTHORIZATION) as "everything
before the first ':'". Your CGI has to do the same thing if it's
responsible for the auth.

Regards,
Yann.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to