[rt-users] Apache authentication, then RT authentication?

[Dave Ewart]

Found something odd ... I re-configured RT and Apache so that
$WebExternalAuth was set and created a local password file for Apache to
use.  Restarted Apache etc.

This is what happens:

1. Open http://.../rt2/ and receive popup browser password prompt as
expected;

2. On entering username/password correctly, I get dumped at the RT login
screen - asking for username and password as it used to before I enable
$WebExternalAuth.  (RT works normally once entering after entering this
username/password BTW)

Why does (2) happen?  Doesn't the use of $WebExternalAuth negate the
need for the RT login and password?  I edited the code in
WebRT/html/Elements/Header to show the value of REMOTE_USER and it is
definitely set to the right value.  What's gone wrong?

I am using version 2.0.11 which has been tweaked a little, but not in
any way that I would have thought would cause the above behaviour.

Any hints?

Dave.

-- 
Dave Ewart
Dave.Ewart at cancer.org.uk
Computing Manager, Epidemiology Unit, Oxford
Cancer Research UK
PGP: CC70 1883 BD92 E665 B840 118B 6E94 2CFD 694D E370