[24535] in Kerberos
Re: way to get username & domainname?
daemon@ATHENA.MIT.EDU (Takafumi Kasagi)
Mon Aug 29 02:17:27 2005
Date: Mon, 29 Aug 2005 15:13:43 +0900
From: Takafumi Kasagi <kasagit@alpha.co.jp>
MIME-Version: 1.0
To: kerberos@mit.edu
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
In-Reply-To: <200508261439.03093.achim@grolmsnet.de>
Message-Id: <20050829061314.5AAEAED2@ms3.alpha.co.jp>
Errors-To: kerberos-bounces@mit.edu
Hi Achim,
I can solve this problem by drawing upon a way you said.
Cgi-bin directory isn't contained within territory of Kerberos Authentication!
I didn't pick up on this.
I changed httpd.conf as follows.
(I've written Kerberos config on httpd.conf not .htaccess)
------------from here-------------from here---------
#<Directory /var/www/html> //Before
<Directory /var/www> //After
AuthType Kerberos
---
abbr.
---
</Directory>
------------to here---------------to here----------
I could get value of "REMOTE_USER" variable(i.e. principal name)by this change.
You made the point right!
Thank you very very much! Achim!!
Please, no flames about my bad English.
Thanks!!
Achim Grolms <achim@grolmsnet.de> wrote:
> Hallo,
> in normale case mod_auth_kerb sets the environment variable
> with the Kerberos principal of the user as you expect.
> In your case I think that Authentication does not work!
>
> Are you really, really sure Authentication is activated for your cgi-bin
> directory?
>
>
> Achim
>
>
> -----------from here-----------from here------------------
> DOCUMENT_ROOT = /var/www/html
> GATEWAY_INTERFACE = CGI/1.1
> HTTP_ACCEPT = /
> HTTP_ACCEPT_ENCODING = gzip, deflate
> HTTP_ACCEPT_LANGUAGE = ja
> HTTP_CONNECTION = Keep-Alive
> HTTP_HOST = server.hogehoge
> HTTP_USER_AGENT = Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET
> CLR 1.1.4322)
> PATH = /sbin:/usr/sbin:/bin:/usr/bin:/usr/X11R6/bin
> QUERY_STRING =
> REMOTE_ADDR = 192.168.0.52
> REMOTE_HOST = client.hogehoge
> REMOTE_PORT = 1364
> REQUEST_METHOD = GET
> REQUEST_URI = /cgi-bin/demo.pl
> SCRIPT_FILENAME = /var/www/cgi-bin/demo.pl
> SCRIPT_NAME = /cgi-bin/demo.pl
> SERVER_ADDR = 192.168.0.100
> SERVER_ADMIN = root@localhost
> SERVER_NAME = server.hogehoge
> SERVER_PORT = 80
> SERVER_PROTOCOL = HTTP/1.1
> SERVER_SIGNATURE = Apache/2.0.53 (Fedora) Server at server.hogehoge Port 80
> SERVER_SOFTWARE = Apache/2.0.53 (Fedora)
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
