mod_auth_openid icon indicating copy to clipboard operation
mod_auth_openid copied to clipboard

mod_auth_openid is an authentication module for the Apache 2 webserver. It handles the functions of an OpenID consumer as specified in the OpenID 2.0 specification.

Results 31 mod_auth_openid issues
Sort by recently updated
recently updated
newest added

Hi, I can't get the REMOTE_USER after successfully authenticating with google/yahoo. I compiled with --enable-debug. If I DO NOT set "AuthOpenIDAXUsername email" i get this in error.log `[Sat Aug 04...

Sometimes apache seems to die on signal 11 when using mod_auth_openid. The crash occurs when login form is submitted. I managed to get a core dump of it, gdb shows...

We have a simple clean install of Apache containing some simple HTML files. When using mod_authn_openid with mod_deflate (enabled by default on Ubuntu, at least) we often get failures. Instead...

Both example pages you provide do not pass GET parameters through to secret page

mod_auth_openid doesn't seem to be setting the AUTH_TYPE environment variable (which things like basic and digest do). There is a check in mod_auth_openid.cpp that checks auth_type.. // if we're not...

I'm using mod_proxy and mod_auth_openid together, with a rewrite rule that should populate the `X-Forwarded-User` header from the contents of `REMOTE_USER`: ``` AuthType OpenID require valid-user RewriteCond %{LA-U:REMOTE_USER} (.+) RewriteRule...

mod_auth_openid appears to be looking for it's own nonce parameter (which is not conveyed as any recognizable openId extension) in the POST parameters. This is easily rectified by combining the...

mod_auth_openid sometimes fails on a perfectly legitimate authentication, passing to my custom login page the error code "invalid_nonce". I have enabled debugging, but the logs don't say anything about the...

potential defect

currently, if the user passes the lifespan, he has to reauthenticate, even he was active just the moment before. suggestion: dynamically extend the lifespan of the session, if there is...

feature

right now, the cookie-expiration and the maximum-valid period of that cookie stored in the db of a successfull authentication are the same. it would be nice to have them spilt....

feature