Basic HTTP Auth Fails

[joximu]

Hi all

I searched the net and it seems that its possible to get a functional Basi HTTP Auth together with Fastcgi (I could not test with fcgi!).

Change the /etc/apache2/mods_enabled/fastcgi_ispcp.conf, the FastCgiConfig Parameters (the "-pass-header" especially):

Code:

FastCgiConfig -minProcesses 1 \
                      -maxProcesses 400 \
                      -maxClassProcesses 5 \
                      -multiThreshold 80 \
                      -killInterval 60 \
                      -startDelay 5 \
                      -idle-timeout 300 \
                      -pass-header Authorization

it seems you just can replace:
-pass-header HTTP_AUTHORIZATION
with:
-pass-header Authorization

in PHP - you have to add this before using the $_SERVER['PHP_AUTH_*'] Variables:

Code:

if (isset($_SERVER['Authorization']) && !empty($_SERVER['Authorization'])) {
    list ($type, $cred) = split (" ", $_SERVER['Authorization']);

    if ($type == 'Basic') {
        list ($user, $pass) = explode (":", base64_decode($cred));
        $_SERVER['PHP_AUTH_USER'] = $user;
        $_SERVER['PHP_AUTH_PW'] = $pass;
    }
}

This works for me - the installation is an very old upgraded RC7 but should work also for other fastcgi installations...

Cheers Joxi

[pongraczi]

(04-02-2009 09:54 PM)joximu Wrote:  This works for me - the installation is an very old upgraded RC7 but should work also for other fastcgi installations...

Cheers Joxi

Hi Joxi,

Are there any similar solution for fcgid? I use fcgid and I have an issue to get working the webdav interface of egroupware 1.6.x.

I got a neverending basic authentication popup and it seems, it cannot make a session. Anyway, except this, egroupware is working well on ispcp.

Thanks,
István

[joximu]

sorry - I use fastcgi and therefore cannot test this.
did you goolge for "pass-header authorization fcgid"?

/J

[pongraczi]

I googled around a little bit, but no breakthrough yet.

[kilburn]

To enable authorization under fcgid, you only have to edit it's configuration file /etc/apache2/mods-enabled/fcgid_ispcp.conf, adding a line like this:

Code:

PassHeader AUTHORIZATION

After that, you can use the following snippet to populate $_SERVER variables with the user supplied values, and work from here

PHP Code:

list($_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW']) = explode(':' , base64_decode(substr($_SERVER['AUTHORIZATION'], 6))); 


Cheers!