Hi folks,

I use a custom auth module with performs connection-legged authentication.
I do see duplicate WWW-Authenticate headers in the response from the server.

[Thu Jul 17 10:40:19 2014] [error] [client <IP>] authenticating main request
[Thu Jul 17 10:40:19 2014] [error] [client <IP>] no Authorization header
[Thu Jul 17 10:40:20 2014] [error] [client <IP>] authenticating main request
[Thu Jul 17 10:40:20 2014] [error] [client <IP>] calling accept_sec_context
[Thu Jul 17 10:40:20 2014] [error] [client <IP>] Negotiate: done: 0/0
[Thu Jul 17 10:40:20 2014] [error] [client <IP>] Authenticating subrequest
[Thu Jul 17 10:40:20 2014] [error] [client <IP>] Negotiate: done: 0/0

The last two lines result in duplicate output.

The question is, what is the purpose of the subrequest in genereal and why
is a subrequest issued at at when my auth method is hooked with:
ap_hook_check_user_id()?

How should I take care of that to avoid duplicate output?

if(ap_is_initial_req(r)
  return DECLINED;

does not solve the problem.

Thanks,

Michael

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Reply via email to