DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=17361>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=17361

Subject Distinguished Name (DN) for FakeBasicAuth changed

           Summary: Subject Distinguished Name (DN) for FakeBasicAuth
                    changed
           Product: Apache httpd-2.0
           Version: 2.0.44
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: mod_ssl
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: [EMAIL PROTECTED]


The Subject Distinguished Name (DN) translation to HTTP Basic Authorization
username on FakeBasicAuth has changed from 2.0.43 to 2.0.44. Given name and
surname are now coded as GN= and SN= instead of G= and S=. That means, that all
usernames in the password file have to be changed.
Example 2.0.44:
REMOTE_USER = /O=company/GN=Wolf-Dietrich/SN=Moeller/xxx=xxx
SSL_CLIENT_S_DN = /O=company/GN=Wolf-Dietrich/SN=Moeller/xxx=xxx
SSL_CLIENT_S_DN_G = Wolf-Dietrich
SSL_CLIENT_S_DN_O = company
SSL_CLIENT_S_DN_S = Moeller
---------
Example 2.0.43:
REMOTE_USER = /O=company/G=Wolf-Dietrich/S=Moeller/xxx=xxx
SSL_CLIENT_S_DN = /O=company/G=Wolf-Dietrich/S=Moeller/xxx=xxx
SSL_CLIENT_S_DN_G = Wolf-Dietrich
SSL_CLIENT_S_DN_O = company
SSL_CLIENT_S_DN_S = Moeller

This behaviour is on WinNT and WinXP. Binaries are downloaded from
http://hunter.campbus.com/ file "Apache_2.0.44-OpenSSL_0.9.7-Win32.zip".

Apache 2.0.44 on UNIX still behaves the old way with G= and S=.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to