[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#799105: Moreinfo: SPNEGO authentication headers can be up to 12392 bytes.



control: tags -1 + moreinfo

According to a quick research:

The solution was to raise the HTTP request header field size with the following directive:

LimitRequestFieldSize  65536

Have a look at the official Apache HTTPD documentation of this directive:

    The LimitRequestFieldSize directive allows the server administrator to set the limit on the allowed size of an HTTP request header field. A server needs this value to be large enough to hold any one header field from a normal client request. The size of a normal request header field will vary greatly among different client implementations, often depending upon the extent to which a user has configured their browser to support detailed content negotiation. SPNEGO authentication headers can be up to 12392 bytes.

To be safe use LimitRequestFieldSize  65536

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: