hgwebdir.cgi did not pass REMOTE_USER...

[Barrow Kwan]

did anyone file a bug report?


--- On Thu, 12/11/08, Michal Zlamal <Michal.Zlamal at Sun.COM> wrote:

> From: Michal Zlamal <Michal.Zlamal at Sun.COM>
> Subject: Re: hgwebdir.cgi did not pass REMOTE_USER...
> To: "Barrow Kwan" <barrowkwan at yahoo.com>
> Cc: mercurial at selenic.com
> Date: Thursday, December 11, 2008, 10:42 AM
> I'd say this is bug in acl extension, it should use  
> env.get('REMOTE_USER') while running under http.
> 
> -M
> On Dec 10, 2008, at 6:49 AM, Barrow Kwan wrote:
> 
> > I am using hgwebdir.cgi with http basic auth to serve
> my hg repos.   
> > However, when I add aclextension, it failed to
> authorize user. after  
> > debugging the issue, I found out after I authenticate
> through Apache  
> > with user "hguser", aclextension has used
> the web server user ( ie  
> > apache ) on the acl hook.  So basically, anyone ( eg
> user1, user2,  
> > user3, etc... ) who successfully login to Apache,
> their user id will  
> > all become "apache" when it pass to
> mercurial ACLExtension.  I am  
> > using mercurial 1.1.  is this a bug or if I did
> something wrong?
> > _______________________________________________
> > Mercurial mailing list
> > Mercurial at selenic.com
> > http://selenic.com/mailman/listinfo/mercurial
> 
> --
> Michal Zlamal                      SUN Microsystems, Inc.,
> SSG
> Architect, Build Engineering       V Parku 2308/8, Praha 4
> Michal.Zlamal at sun.com              phone: +420 233 009 227