On Feb 21, 2013, at 11:53 AM, Liam Hoekenga <li...@umich.edu> wrote:

> ...
> Ok.. so that didn't work in .htaccess, but this did..
> 
>      RewriteRule .* - [E=AJP_KRB5CCNAME:%{ENV:KRB5CCNAME}]
> 
> Putting it in .htaccess won't work, though, because the request needs to be 
> proxied through mod_proxy_ajp.
> 
> Fromt the mod_rewrite docs..
> 
> http://httpd.apache.org/docs/current/mod/mod_rewrite.html
> 
>       • On the other hand, because mod_rewrite implements its per-directory 
> context (.htaccess file) via the Fixup phase of the API and because the 
> authorization phases come before this phase, you just can use %{REMOTE_USER} 
> in that context.
> 
> So... I'm guessing this is working because cosign is running before 
> mod_rewrite in this configuration.

Try the attached patch for apache2 mod_cosign 3.2.0. Ideally, it will force 
mod_cosign to run ahead of mod_rewrite. If it doesn't work, we can look at a 
patch that allows the administrator to specify a prefix for the environment 
variables set by mod_cosign.

andrew

Attachment: mod_cosign_apache2_rewrite.patch
Description: Binary data

------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_feb
_______________________________________________
Cosign-discuss mailing list
Cosign-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/cosign-discuss

Reply via email to