Bug 53002

Summary:	<Location> and auth_form (trailing slash problem?)
Product:	Apache httpd-2	Reporter:	Thomas Stein <t.stein>
Component:	Core	Assignee:	Apache HTTPD Bugs Mailing List <bugs>
Status:	NEW ---
Severity:	normal
Priority:	P2
Version:	2.4.1
Target Milestone:	---
Hardware:	PC
OS:	Linux

Description Thomas Stein 2012-03-29 15:14:39 UTC

Hello.

I have a virtual host configured with a location set to use auth_form:

        <Location /munin>
                #DirectorySlash Off
                AuthFormProvider file
                ErrorDocument 401 /login.shtml
                AuthUserFile /etc/apache2/.htpasswd 
                AuthType form
                AuthName Munin 
                #AuthFormLoginRequiredLocation http://xenbeere.de/login.html
                Session On
                SessionCookieName session path=/
                # SessionCryptoPassphrase secret
                Require valid-user

        </Location>

When i go to http://host/munin everything works fine. Auth form needs to filled in and after that the page shows up.

But if i use hhtp://host/munin/ (note the trailing slash) the auth form shows up and after entering the credentials "Internal Server Error" is shown. The log says:

[Thu Mar 29 16:12:35.665238 2012] [core:error] [pid 5422:tid 140602179712768] [client xxx.xxx.xxx.xxx:58670] AH00027: Buggy authn provider failed to set user for /munin/index.html.var, referer: http://host/munin/

Even weirder. If i set this authenticator in .htaccess everything is working fine.

Any hints? Do i something stupid again?

best regards
t.