Re: [htdig] Basic Auth username munged

[Gilles D. <gr...@sc...>]

According to Gold:
> Some stats;
> RedHat 7.3
> php-4.2.2-mgd_1.4.4
> htdig-3.2.0-2.011302
> apache-1.3.27-3
> 
> One thing I noticed was that when lynx was given the -auth param it 
> would only use it after it received a 401 error so my script had to send 
> the 401 header to tell lynx to send the auth details.  Does htdig work 
> in this manner or does it send the  username:password with every call by 
> default?

The latter.  If a username and password are given, either by the -u
option to htdig, or by the authorization attribute in the config file,
htdig will add an "Authorization: Basic" header to every request, followed
by the encrypted credentials.  It doesn't wait for a 401 error to do so.
With htdig 3.2, you need at least -vvvvvvv (debug/verbosity level 7)
to see what the full request looks like that htdig sends to the server.
(I don't know why it has to be so high - in 3.1.x you'd get it at a
debug level of 3.)

In any case, there was a week-long bug in the CVS development code for 3.2,
which Red Hat unfortunately "immortalized" by using that particular snapshot.
This bug caused htdig not to set the credentials properly.

See https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=69023

I recommend you try the 3.2.0b6 release, which just came out this week.
It has tons of bug fixes that came out since the two and a half year old
version you're fighting with now.  I don't think it's out in RPM yet, but
building it from source is well worth the effort.

-- 
Gilles R. Detillieux              E-mail: <gr...@sc...>
Spinal Cord Research Centre       WWW:    http://www.scrc.umanitoba.ca/
Dept. Physiology, U. of Manitoba  Winnipeg, MB  R3E 3J7  (Canada)