I have webserver_auth setup and use Apache/mod_auth_kerb to control access to Drupal with both KrbMethodK5Passwd and KrbMethodNegotiate enabled. If the web client uses Basic authentication then the username created in Drupal is 'username@REALM'. However if Negotiate is used because I have a kerberos ticket then the username is simply 'username'. This is happening because in webserver_auth_webserver_auth() the name stripping only occurs when using NTLM or Negotiate authentication. I've added Basic to that conditional however I'm not sure if this has any adverse affects with other authentication modules.

CommentFileSizeAuthor
webserver_auth.module_BasicVsNegotiate.diff600 bytestmclaugh

Comments

gaards’s picture

gaards commented
Issue summary: View changes
Status: Active » Closed (outdated)

Closed because Drupal 5 is not supported. If the issue verifiably applies to later versions, please reopen with details and update the version.