On Mon, May 8, 2017 at 10:37 AM, Dirk van Deun <dvand...@wilma.vub.ac.be> wrote: >> >> Are you able to recompile? >> >> untested: http://people.apache.org/~covener/patches/2.4.x-bindpw_empty.diff >> >> you would not specify the directive in your case >> > > That fixes it. If there is no other way around this, it would indeed > seem to be a bug.
I can't really think of any feasible workaround to intercept that and replace the password. If you're able, can you confirm s/AUTH_USER_NOT_FOUND/AUTH_DENIED/ works too? Probably more appropriate. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org