Bug#136989: marked as done (Problem of authentification with Apache and mod_proxy)
Your message dated Fri, 17 Oct 2003 15:47:13 +0100
with message-id <20031017144713.GO18370@parcelfarce.linux.theplanet.co.uk>
and subject line done for ages
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 5 Mar 2002 20:50:57 +0000
>From jp@nexedi.com Tue Mar 05 14:50:57 2002
Return-path: <jp@nexedi.com>
Received: from main.smets.com (storever.smets.com) [212.43.237.68]
by master.debian.org with esmtp (Exim 3.12 1 (Debian))
id 16iLth-0000wX-00; Tue, 05 Mar 2002 14:50:57 -0600
Received: from there (localhost [127.0.0.1])
by storever.smets.com (Postfix) with SMTP id DAFA9190042
for <submit@bugs.debian.org>; Tue, 5 Mar 2002 21:50:53 +0100 (CET)
Content-Type: text/plain;
charset="iso-8859-1"
From: Jean-Paul Smets <jp@nexedi.com>
To: submit@bugs.debian.org
Subject: Problem of authentification with Apache and mod_proxy
Date: Tue, 5 Mar 2002 21:50:41 +0100
X-Mailer: KMail [version 1.3.2]
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Message-Id: <20020305205053.DAFA9190042@storever.smets.com>
Delivered-To: submit@bugs.debian.org
Package: zope-cmfcore
Version: 1.2-2
Whenever one tries to use the CMF together with Apache in a configuration
which uses the Virtual Host Monster in order to set a CMF as a virtual
domain, the cookie-based authentication stops working. Only one cookie
(__ac_name) is set. However, a second cookie is required (__ac). Basic
inspection of the code and tracing show that CMF code in CookieCrumbler
calls setCookie on both cookies. However, Lynx shows that only one cookie
is received by the navigator.
Temporary fix consists in changing the cookie name for authenticatino to
__ac_whatever
Bug may combine both Zope CMF and Apache mod_proxy issues.
Apache configuration in shown bellow to try to reproduce this bug
<VirtualHost erp5.org>
DocumentRoot /home/jp/public_html/erp5/
ServerName erp5.org
ServerAlias www.erp5.org
RewriteEngine On
RewriteRule ^/(.*)
http://localhost:9673/VirtualHostBase/http/www.erp5.org:80/erp5/VirtualHostRoot/$1
[L,P]
</VirtualHost>
--
Jean-Paul Smets-Solanes <jp@nexedi.com> - Nexedi (CEO)
GPG Fingerprint: 40FF FA78 75AA 680D 8BB4 EEF9 539A 79CC CB8E 5F01
---------------------------------------
Received: (at 136989-close) by bugs.debian.org; 17 Oct 2003 14:47:15 +0000
>From willy@www.linux.org.uk Fri Oct 17 09:47:14 2003
Return-path: <willy@www.linux.org.uk>
Received: from parcelfarce.linux.theplanet.co.uk (www.linux.org.uk) [195.92.249.252]
by master.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1AAVso-0001hO-00; Fri, 17 Oct 2003 09:47:14 -0500
Received: from willy by www.linux.org.uk with local (Exim 4.22)
id 1AAVsn-00013H-PG
for 136989-close@bugs.debian.org; Fri, 17 Oct 2003 15:47:13 +0100
Date: Fri, 17 Oct 2003 15:47:13 +0100
From: Matthew Wilcox <willy@debian.org>
To: 136989-close@bugs.debian.org
Subject: done for ages
Message-ID: <20031017144713.GO18370@parcelfarce.linux.theplanet.co.uk>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4.1i
Sender: <willy@www.linux.org.uk>
Delivered-To: 136989-close@bugs.debian.org
X-Spam-Status: No, hits=1.0 required=4.0
tests=BAYES_60
version=2.53-bugs.debian.org_2003_10_17
X-Spam-Level: *
X-Spam-Checker-Version: SpamAssassin 2.53-bugs.debian.org_2003_10_17 (1.174.2.15-2003-03-30-exp)
Since we're at 1.3.27 now and the bug report refers to it being fixed
post 1.3.24, this bug can be closed.
--
"It's not Hollywood. War is real, war is primarily not about defeat or
victory, it is about death. I've seen thousands and thousands of dead bodies.
Do you think I want to have an academic debate on this subject?" -- Robert Fisk
Reply to: