dietbuddha at gmail
Jul 7, 2009, 10:08 AM
Post #2 of 2
(584 views)
Permalink
|
|
Re: Can a PerlAuthzHandler access ENV variables set by mod_auth_kerb?
[In reply to]
|
|
On Mon, Jul 6, 2009 at 10:14 AM, Mike Diehn<mike [at] diehn> wrote:
>
>
> Hello, all.
>
> I'm authenticating users with mod_auth_krb and setting KrbSaveCredentials
> to on. I've found that the credentials are stored in a file in /tmp. The
> name of the file is passed to CGI programs as the contents of an ENV var
> named KRB5CCNAME.
>
> I'm handling the authorization phase with a mod_perl2 PerlAuthzHandler
> script. I want to use the credentials that mod_auth_kerb just verified.
> By this phase, the name of the credential cache file has been stored
> somewhere by mod_auth_kerb.
>
> The question is this:
>
> How can I get that filename?
> How can I read the ENV that will ultimately go to CGI scripts?
>
> PerlPassEnv seems not to do it.
On Mon, Jul 6, 2009 at 10:14 AM, Mike Diehn<mike [at] diehn> wrote:
>
> Hello, all.
>
> I'm authenticating users with mod_auth_krb and setting KrbSaveCredentials
> to on. I've found that the credentials are stored in a file in /tmp. The
> name of the file is passed to CGI programs as the contents of an ENV var
> named KRB5CCNAME.
>
> I'm handling the authorization phase with a mod_perl2 PerlAuthzHandler
> script. I want to use the credentials that mod_auth_kerb just verified.
> By this phase, the name of the credential cache file has been stored
> somewhere by mod_auth_kerb.
>
> The question is this:
>
> How can I get that filename?
> How can I read the ENV that will ultimately go to CGI scripts?
>
> PerlPassEnv seems not to do it.
You need both PassEnv and PerlPassEnv. Alternatively you may be able
to access the variable using subprocess_env.
http://perl.apache.org/docs/2.0/api/Apache2/RequestRec.html#C_subprocess_env_
-wjt
|
