WWSympa: New "cgi" authentication simply using credentials provided by HTTP server

[ikedas]

By this PR. the new "cgi" paragraph(s) may be added in auth.conf:

cgi
    auth_scheme Basic
    remote_user_variable REMOTE_USER
    regexp @my[.]dom[.]ain
    negative_regexp evil@user[.]net

All parameters are optional.

• remote_user_variable (default value is REMOTE_USER) is the name of CGI variable providing e-mail of the authenticated user.
• If auth_scheme is specified, authentication is available only when the value of AUTH_TYPE CGI variable matches it.

This is a candidate of changes aim at fixing #1497.

[m0ppers]

I tested it and it seems to work and solves my usecase 🥳

[salaun-urennes1]

I didn't test the code, but if seems to be aligned with our discussion on PR #1496 /sympa/pull/1496

[ikedas]

Merged. @m0ppers & @salaun-urennes1 , thank you for input & confirmation!

[bilias]

How do you trigger the authentication for b38f970 ?

Is there an action page for this or a login button?
I'm trying to test this with openid but it does not seem to work.

My apache setup is ok with mod_auth_openidc.
Client is authenticated on the apache apache side, but not on sympa

[ikedas]

Hi @bilias ,
This issue has been closed. About the settings you want, please post new question to the mailing list or this issue page.