On Feb 21, 2013, at 11:53 AM, Liam Hoekenga <li...@umich.edu> wrote:
> ... > Ok.. so that didn't work in .htaccess, but this did.. > > RewriteRule .* - [E=AJP_KRB5CCNAME:%{ENV:KRB5CCNAME}] > > Putting it in .htaccess won't work, though, because the request needs to be > proxied through mod_proxy_ajp. > > Fromt the mod_rewrite docs.. > > http://httpd.apache.org/docs/current/mod/mod_rewrite.html > > • On the other hand, because mod_rewrite implements its per-directory > context (.htaccess file) via the Fixup phase of the API and because the > authorization phases come before this phase, you just can use %{REMOTE_USER} > in that context. > > So... I'm guessing this is working because cosign is running before > mod_rewrite in this configuration. Try the attached patch for apache2 mod_cosign 3.2.0. Ideally, it will force mod_cosign to run ahead of mod_rewrite. If it doesn't work, we can look at a patch that allows the administrator to specify a prefix for the environment variables set by mod_cosign. andrew
mod_cosign_apache2_rewrite.patch
Description: Binary data
------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_feb
_______________________________________________ Cosign-discuss mailing list Cosign-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/cosign-discuss