Problem with parsing cookies...

78 views

Skip to first unread message

Christian Klinger

unread,

Mar 28, 2011, 10:51:50 AM3/28/11

to mod_auth_pubtkt users

Hi

i try to setup mod_auth_pubtkt, and i have the impression that the
parsing of my "mod_pubtkt" cookie does
not work as expected.

These are the relevant parts of my event.log

root@tirpitz reporxy> [ mod_auth_pubtkt config ]
TKTAuthLoginURL: http://sso.novareto.de/
TKTAuthTimeoutURL: http://sso.novareto.de/?timeout=1
TKTAuthPostTimeoutURL: (null)
TKTAuthUnauthURL: http://sso.novareto.de/?unauth=1
TKTAuthCookieName: (null)
TKTAuthBackArgName: (null)
TKTAuthRefreshURL: (null)
TKTAuthRequireSSL: -1
TKTAuthToken: su
TKTAuthDebug: 3
TKTAuthFakeBasicAuth: -1
[Mon Mar 28 16:48:56 2011] [info] [client 192.168.2.167] TKT: no
ticket found - redirecting to login URL
[Mon Mar 28 16:48:56 2011] [debug] mod_auth_pubtkt.c(701): [client
192.168.2.167] TKT: back url 'http://extranet.novareto.de/'
[Mon Mar 28 16:48:56 2011] [debug] mod_auth_pubtkt.c(714): [client
192.168.2.167] TKT: redirect 'http://sso.novareto.de/?back=http%3a%2f
%2fextranet.novareto.de%2f'
[ mod_auth_pubtkt config ]
TKTAuthLoginURL: http://sso.novareto.de/
TKTAuthTimeoutURL: http://sso.novareto.de/?timeout=1
TKTAuthPostTimeoutURL: (null)
TKTAuthUnauthURL: http://sso.novareto.de/?unauth=1
TKTAuthCookieName: (null)
TKTAuthBackArgName: (null)
TKTAuthRefreshURL: (null)
TKTAuthRequireSSL: -1
TKTAuthToken: su
TKTAuthDebug: 3
TKTAuthFakeBasicAuth: -1
[Mon Mar 28 16:49:01 2011] [debug] mod_auth_pubtkt.c(413): [client
192.168.2.167] TKT cookie_match: found 'uid=0101010001', referer:
http://sso.novareto.de/?back=http%3a%2f%2fextranet.novareto.de%2f
[Mon Mar 28 16:49:01 2011] [info] [client 192.168.2.167] TKT: no
ticket found - redirecting to login URL, referer:
http://sso.novareto.de/?back=http%3a%2f%2fextranet.novareto.de%2f
[Mon Mar 28 16:49:01 2011] [debug] mod_auth_pubtkt.c(701): [client
192.168.2.167] TKT: back url 'http://extranet.novareto.de/', referer:
http://sso.novareto.de/?back=http%3a%2f%2fextranet.novareto.de%2f
[Mon Mar 28 16:49:01 2011] [debug] mod_auth_pubtkt.c(714): [client
192.168.2.167] TKT: redirect 'http://sso.novareto.de/?back=http%3a%2f
%2fextranet.novareto.de%2f', referer: http://sso.novareto.de/?back=http%3a%2f%2fextranet.novareto.de%2f

This is the contents of my cookie in firebug...

auth_pubtkt="uid=0101010001;validuntil=1333231200;tokens=su;sig=TVE1o1cphFypgupNI5SrrbHmc6SLXOMzNwbhpoiOA3DmHqaIjE8YD6TX3RGI3nlXGCN/
KH+PcPVRTgEON/ovt9K5VdLziLWLGh3wZjAQb7fDQ/Kgi/
2lsnxvs5AWMPBFC58DhdPuk8nN0Aal9dywfh0l/IowpZPuLa0QiMHgIfg="

Any idea what goes on?

Thanks in advance
Christian

Manuel Kasper

unread,

Mar 28, 2011, 12:50:57 PM3/28/11

to mod_auth_p...@googlegroups.com

On 28.03.2011, at 16:51, Christian Klinger wrote:

> i try to setup mod_auth_pubtkt, and i have the impression that the
> parsing of my "mod_pubtkt" cookie does
> not work as expected.

> ...

> [Mon Mar 28 16:49:01 2011] [debug] mod_auth_pubtkt.c(413): [client
> 192.168.2.167] TKT cookie_match: found 'uid=0101010001', referer:
> http://sso.novareto.de/?back=http%3a%2f%2fextranet.novareto.de%2f

How do you generate your login cookie? It looks like the cookie value may not be properly URL-encoded...