> In my PerlAuthenHandler I need to send back the WWW-Authenticate-line.
> I use $r->headers_out("WWW-Authenticate" => 'basic realm => "MyName"').
> But if i returned from the Handler with "return AUTH_REQUIRED" , Apache
> doesn't send this line in the header.
This is (one of) the relevant sections in *my* AuthenHandler:
unless (length $acctid) {
# no auth information
$r->note_basic_auth_failure;
$r->log_reason("no user provided", $r->filename);
return AUTH_REQUIRED;
}
It actually has several sections like that, for different criteria. But
what is important here is the Apache method call
$r->note_basic_auth_failure(). This is the method that is responsible for
setting the right WWW-Authenticate header. If your AuthHandler is for Basic
Auth (with the prompting from the browser), then the Realm should already be
configured in the httpd.conf, e.g.
<Location /stats>
AuthName "Stats"
AuthType Basic
PerlAuthenHandler +Stat::Auth
</Location>
Just to pick a tiny nit, the header you are providing is incorrect:
WWW-Authenticate: basic realm => "MyName" # <-- yours
WWW-Authenticate: Basic realm="Stats" # <-- just pulled this off of a
server
Hope this helps!
L8r,
Rob
