Username differs depending on Basic vs Negotiate AUTH_TYPE with mod_auth_kerb

tmclaugh - March 28, 2008 - 19:49
Project:Webserver authentication
Version:5.x-0.0-rc1
Component:Code
Category:bug report
Priority:normal
Assigned:Unassigned
Status:active
Description

I have webserver_auth setup and use Apache/mod_auth_kerb to control access to Drupal with both KrbMethodK5Passwd and KrbMethodNegotiate enabled. If the web client uses Basic authentication then the username created in Drupal is 'username@REALM'. However if Negotiate is used because I have a kerberos ticket then the username is simply 'username'. This is happening because in webserver_auth_webserver_auth() the name stripping only occurs when using NTLM or Negotiate authentication. I've added Basic to that conditional however I'm not sure if this has any adverse affects with other authentication modules.

AttachmentSize
webserver_auth.module_BasicVsNegotiate.diff600 bytes
 
 

Drupal is a registered trademark of Dries Buytaert.