#46005 [NEW]: User not consistently logged under Apache2

From: admorten at umich dot edu Operating system: Linux 2.6.21.3 PHP version: 5.2.6 PHP Bug Type: Apache2 related Bug description: User not consistently logged under Apache2 Description: ------------ The apache2 handler and filter strip the user (r->user) from the request if there's no Authorization header in the request. This breaks user logging for authorization filters like mod_auth_kerb, mod_authnz_ldap and mod_cosign, which do not use the Authorization header. The patches linked to below check to see r->user is set and ensures that the user remains attached to the request, which Apache2 can then use to log the user properly. This should fix the issues reported previously in bug #44631. The issue was partially fixed with the patch in bug #22672, but that patch continued to rely on Authorization headers, and was only applied to the apache2 handler. Patches (apply to 5.2.6): <http://rsug.itd.umich.edu/~admorten/sapi_apache2filter_user_logging_f ix.patch> <http://rsug.itd.umich.edu/~admorten/sapi_apache2handler_user_logging_ fix.patch> -- Edit bug report at http://bugs.php.net/?id=46005&edit=1 -- Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=46005&r=trysnapshot52 Try a CVS snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=46005&r=trysnapshot53 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=46005&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=46005&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=46005&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=46005&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=46005&r=needscript Try newer version: http://bugs.php.net/fix.php?id=46005&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=46005&r=support Expected behavior: http://bugs.php.net/fix.php?id=46005&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=46005&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=46005&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=46005&r=globals PHP 4 support discontinued: http://bugs.php.net/fix.php?id=46005&r=php4 Daylight Savings: http://bugs.php.net/fix.php?id=46005&r=dst IIS Stability: http://bugs.php.net/fix.php?id=46005&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=46005&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=46005&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=46005&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=46005&r=mysqlcfg