https://issues.apache.org/bugzilla/show_bug.cgi?id=46978
--- Comment #6 from Michael <[email protected]> 2011-09-21 08:42:22 UTC --- (In reply to comment #5) > You both are getting a 401 because authorization failed. 401 is consistent > with other authz modules, since you can change your userid and retry. In my interpretation authn modules should reply with 401 and authz modules should reply with 403. In our configuration mod_auth_kerb has the authn role and mod_authnz_ldap only has the authz role and must not send an 401. Any reauthentication (and sending 401s) has to be done by mod_auth_kerb. Please take a minute and consider that. Thanks, Michael -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
