mod_auth_cas doesn't set AUTH_TYPE in script enviromnent?

13 views

Skip to first unread message

Mark H. Wood

unread,

Apr 16, 2021, 4:48:27 PM4/16/21

to cas-...@apereo.org

I'm tinkering with some test CGI scripts to prepare for a real
project, and I noticed that a script protected by CAS doesn't get a
value for AUTH_TYPE in its environment, whereas a similar location
protected by one of the AuthType Basic does. Am I doing something
wrong?

(Web server is Apache HTTPD 2.4.46, mod_auth_cas is 1.2)

Alias /application /path/to/application/login

CASLoginURL https://www.example.com:9443/cas/login
CASValidateURL https://www.example.com:9443/cas/serviceValidate

<Directory /path/to/application/login>
Options +ExecCGI
AddHandler cgi-script .pl

<Files "cas-login.pl">
AuthType CAS
Require valid-user
</Files>

<Files "file-login.pl">
AuthName "Special User"
AuthType Basic
AuthBasicProvider dbm
AuthDBMType GDBM
AuthDBMUserFile /path/to/application/special-users.gdbm
Require valid-user
</Files>

</Directory>

--
Mark H. Wood
Lead Technology Analyst

University Library
Indiana University - Purdue University Indianapolis
755 W. Michigan Street
Indianapolis, IN 46202
317-274-0749
www.ulib.iupui.edu

signature.asc

David Hawes

unread,

Apr 21, 2021, 5:24:02 PM4/21/21

to CAS Community

On Fri, 16 Apr 2021 at 16:48, Mark H. Wood <mw...@iupui.edu> wrote:
>
> I'm tinkering with some test CGI scripts to prepare for a real
> project, and I noticed that a script protected by CAS doesn't get a
> value for AUTH_TYPE in its environment, whereas a similar location
> protected by one of the AuthType Basic does. Am I doing something
> wrong?

No, mod_auth_cas simply does not set ap_auth_type. Does this cause you
any issue?

The attached patch against git master will set it if you'd like it to be set.