Basic HTTP Auth Fails

[joximu]

Hi all

I searched the net and it seems that its possible to get a functional Basi HTTP Auth together with Fastcgi (I could not test with fcgi!).

Change the /etc/apache2/mods_enabled/fastcgi_ispcp.conf, the FastCgiConfig Parameters (the "-pass-header" especially):

Code:

FastCgiConfig -minProcesses 1 \
                      -maxProcesses 400 \
                      -maxClassProcesses 5 \
                      -multiThreshold 80 \
                      -killInterval 60 \
                      -startDelay 5 \
                      -idle-timeout 300 \
                      -pass-header Authorization

it seems you just can replace:
-pass-header HTTP_AUTHORIZATION
with:
-pass-header Authorization

in PHP - you have to add this before using the $_SERVER['PHP_AUTH_*'] Variables:

Code:

if (isset($_SERVER['Authorization']) && !empty($_SERVER['Authorization'])) {
    list ($type, $cred) = split (" ", $_SERVER['Authorization']);

    if ($type == 'Basic') {
        list ($user, $pass) = explode (":", base64_decode($cred));
        $_SERVER['PHP_AUTH_USER'] = $user;
        $_SERVER['PHP_AUTH_PW'] = $pass;
    }
}

This works for me - the installation is an very old upgraded RC7 but should work also for other fastcgi installations...

Cheers Joxi