projects / mod_auth_gssapi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c1b6fca) | patch
Disable connection-bound for basic-auth
authorIsaac Boukris <iboukris@gmail.com>
Sun, 7 Jun 2015 21:52:30 +0000 (00:52 +0300)
committerSimo Sorce <simo@redhat.com>
Mon, 8 Jun 2015 14:15:58 +0000 (10:15 -0400)
commit9cfa62da9119d2cd62314e5328215f8ea45c64b1
treee85296ae9ce07ec8bd3d6fd941812f1c75896548tree | snapshot
parentc1b6fcaea24a51a235f62a7bb03767a120b24872commit | diff
Disable connection-bound for basic-auth

Clients don't expect this and therefore might inappropriately reuse the
connection for another user identity (with or without creds).

This is currently more of an issue due to issue 22, example:
curl -v http://myhost/ -u usera:passa --next http://myhost/ -u userb:passb

Closes #36

Reviewed-by: Simo Sorce <simo@redhat.com>
src/mod_auth_gssapi.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.