[Zope-Coders] Re: [ZC] 148/ 2 Reject "mod_fastcgi and Authorization header issue"

[Matt Behrens]

--+QahgC5+KEYLbs62
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Aug 14, 2002 at 11:06:59AM -0400, Ty Sarna wrote:

> > I use -pass-header in production and it works just fine.  I have not se=
en the
> >  behavior you speak of.
>=20
> "It works for me in some unspecified configuration. You must be
> imagining things" is not a very satisfying response.
>=20
> At a minumum, you could state the configuration (configuration settings
> and software versions) that is working for you. It doesn't work for me
> without this patch.

See FCGIServer.py, FCGIChannel.found_terminator.  It is handled
there.  This is the proper place to do so, as we don't need to
pollute HTTPRequest.  It has been there since rev 1.1.

Authorization is not deleted from the environment though; this is
bad.  I will fix this.

My config: Apache 1.3.12, mod_fastcgi 2.2.10, with various Zopes
2.4.1 through 2.5.1.

FastCgiExternalServer /oracle/local/Apache/Apache/fcgi/Zope.fcgi \
        -socket /zope/var/FastCGI.soc \
        -pass-header Authorization -idle-timeout 900

--=20
Matt Behrens <matt@zigg.com> <URL:http://zigg.com/>

--+QahgC5+KEYLbs62
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (OpenBSD)

iD8DBQE9WnUt+xq4JbgNGlMRAiIZAKCL62fuhzupDqeYFSGUxAE5NK7TcACeKIjo
L1harjVW8unNyrJqA+FqoOc=
=Mtdn
-----END PGP SIGNATURE-----

--+QahgC5+KEYLbs62--