Bug#543333: apache2: <Location> doesn't work anymore with mod_python

[Adam Cécile (Le_Vert) <gandalf@le-vert.net>]

Package: apache2.2-common
Version: 2.2.12-1
Severity: serious

Hello,

Since some time around 20090816, I'm unable to login to my Trac
because I get inside the Trac python code, without being prompted for
authentication first.
It's seems <Location> doesn't work anymore on vhost running Python.

Here is a sample virtual host conf file:
<VirtualHost *:80>
    DocumentRoot /var/www
    ServerName vpn.le-vert.net
    <Location />
        SetHandler mod_python
        PythonInterpreter main_interpreter
        PythonHandler trac.web.modpython_frontend
        PythonOption TracEnv /home/projects/test/trac/
        PythonOption TracUriRoot /
    </Location>
    <Location /login>
        AuthType Basic
        AuthName "MyCompany Trac Server"
        AuthUserFile /home/projects/test/apache2/htaccess
        Require valid-user
    </Location>
    <Location /test>
        AuthType Basic
        AuthName "MyCompany Trac Server"
        AuthUserFile /home/projects/test/apache2/htaccess
        Require valid-user
    </Location>
</VirtualHost>

Accessing /test or /login doesn't prompt for authentication.

I haven't been able to figure how what's broken but I decided
to report the bug against apache because I think <Location> are
read before running the python code.

Feel free to ask me anything, this bug is making me crazy.

Regards, Adam.

-- Package-specific info:
List of enabled modules from 'apache2 -M':
  actions* alias auth_basic authn_file authnz_ldap authz_default
  authz_groupfile authz_host authz_svn authz_user autoindex cgi dav
  dav_svn deflate dir env include ldap mime negotiation php5 python
  rewrite security2 setenvif ssl status unique_id
  (A * means that the .conf file for that module is not enabled in
   /etc/apache2/mods-enabled/)

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.30-1-686 (SMP w/1 CPU core)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages apache2 depends on:
ii  apache2-mpm-prefork           2.2.12-1   Apache HTTP Server - traditional n
ii  apache2.2-common              2.2.12-1   Apache HTTP Server common files

apache2 recommends no packages.

apache2 suggests no packages.

Versions of packages apache2.2-common depends on:
ii  apache2-utils                 2.2.12-1   utility programs for webservers
ii  apache2.2-bin                 2.2.12-1   Apache HTTP Server common binary f
ii  libmagic1                     5.03-1     File type determination library us
ii  lsb-base                      3.2-23     Linux Standard Base 3.2 init scrip
ii  mime-support                  3.46-1     MIME files 'mime.types' & 'mailcap
ii  perl                          5.10.0-24  Larry Wall's Practical Extraction 
ii  procps                        1:3.2.8-1  /proc file system utilities

-- no debconf information