Add mod_authn_remoteuser #64
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This standalone module allows configuring a location for header-based authentication, including optional/anonymous. It is activated with `AuthType RemoteUser`. The header is configurable with `RemoteUserHeader Whatever-You-Want`. When set as the AuthType, it always passes authentication. If the header is not sent, it passes authentication while setting the anonymous username. The username/REMOTE_USER is empty by default. The anonymous username is configurable with `RemoteUserAnonymousUsername whatever-you-want`. The ap_auth_type is set to "RemoteUser". There is also a debug CGI set up, using the printenv that is shipped with the httpd image. It dumps the environment like we had in the "delegated" script, but it uses env style syntax without the dependency on the JSON::XS CPAN module.
malakai97
approved these changes
Jan 8, 2024
| @@ -193,7 +193,7 @@ LoadModule autoindex_module modules/mod_autoindex.so | |||
| #LoadModule info_module modules/mod_info.so | |||
| #LoadModule suexec_module modules/mod_suexec.so | |||
| <IfModule !mpm_prefork_module> | |||
| #LoadModule cgid_module modules/mod_cgid.so | |||
| LoadModule cgid_module modules/mod_cgid.so | |||
There was a problem hiding this comment.
We need to enable both cgi and cgid to be able to run the scripts with ScriptAlias. Combined with the printenv script, this is a simple way to approximate an app running "under" Apache and examine the environment we would expose there.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This standalone module allows configuring a location for header-based authentication, including optional/anonymous.
It is activated with
AuthType RemoteUser.The header is configurable with
RemoteUserHeader Whatever-You-Want.When set as the AuthType, it always passes authentication. If the header is not sent, it passes authentication while setting the anonymous username. The username/REMOTE_USER is empty by default.
The anonymous username is configurable with
RemoteUserAnonymousUsername whatever-you-want.The ap_auth_type is set to "RemoteUser".
There is also a debug CGI set up, using the printenv that is shipped with the httpd image. It dumps the environment like we had in the "delegated" script, but it uses env style syntax without the dependency on the JSON::XS CPAN module.