Topic: mod_headers

[haze]

Is it possible to modify incoming headers of a location protected by

<LocationMatch "/*">
AuthType Auth
require valid-user
</LocationMatch>

How do I make use of the RequestHeader directive?

All I want to do is change the headers before the 'require valid-user' prompts for authentication.

Here Auth is an external security module.

[tdonovan]

It isn't clear which version of Apache you are running, or exactly what you are trying to accomplish.
Maybe you are trying to change or add an Authorization or Proxy-Authorization header?

With Apache 2.0: no.

RequestHeader happens after authentication is done.

With Apache 2.2: maybe, using early-mode.

See the RequestHeader docs for Apache 2.2, especially the warnings in the early-mode section.
One problem is that you will need to set RequestHeader for the whole server, or at least for an entire virtual host, because early-mode can't work inside a <Location> or <Directory> block.

-tom-

p.s. Your <LocationMatch "/*"> seems odd. Do you really mean "zero or more slashes"
- or did you intend <LocationMatch "/.*"> which would be "a slash followed by zero or more characters"?

[haze]

I was also thinking of the early mode but sadly, I have to use Apache 2.0.

Is there any other way of manipulating these headers?
Will it be possible to through a custom module?


Thanks for the help.

[tdonovan]

re: "Will it be possible to through a custom module? "

It certainly looks possible.
Instead of a new module, perhaps you could simply change Apache 2.0 mod_headers to always make RequestHeader work in early mode by changing one line in modules/metadata/mod_headers.c

from:

[haze]

I really don't know how to thank you.
You are my hero. This works perfectly.