Username differs depending on Basic vs Negotiate AUTH_TYPE with mod_auth_kerb
tmclaugh - March 28, 2008 - 19:49
| Project: | Webserver authentication |
| Version: | 5.x-0.0-rc1 |
| Component: | Code |
| Category: | bug report |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | active |
Description
I have webserver_auth setup and use Apache/mod_auth_kerb to control access to Drupal with both KrbMethodK5Passwd and KrbMethodNegotiate enabled. If the web client uses Basic authentication then the username created in Drupal is 'username@REALM'. However if Negotiate is used because I have a kerberos ticket then the username is simply 'username'. This is happening because in webserver_auth_webserver_auth() the name stripping only occurs when using NTLM or Negotiate authentication. I've added Basic to that conditional however I'm not sure if this has any adverse affects with other authentication modules.
| Attachment | Size |
|---|---|
| webserver_auth.module_BasicVsNegotiate.diff | 600 bytes |
