[pca] RFE: pca-proxy.cgi without stored credentials

Martin Paul martin at par.univie.ac.at
Wed Nov 18 12:41:35 CET 2009


Hi Sebastian,

> The somewhat adjusted 500 error message came from an intermediary proxy.
> pca-proxy.cgi responded with "HTTP/1.1 500 SOA missing" which the proxy
> translated into "HTTP/1.0 500 Internal Server Error". Once i skipped the
> proxy everything went smoothly. Seems as if our internal proxy doesn't
> care that much about the informational message provided by the target
> host ... o.O ... interesting.

I'm no proxy expert, but I would have expected it to forward the message 
it got from the webserver. Anyway, I've made some more modifications in 
the current development release, fixing the things we talked about:

  * Make behaviour of the askauth option the default and deprecate it
  * Never ask for SOA data if user option is set to dontask
  * Accept only user and passwd option via HTTP header in proxy mode
  * Return HTTP error 401 instead of 500 when proxy needs SOA data
  * Return HTTP error 404 instead of 500 when proxy can't find a file
  * Be more verbose when trying downloads from SunSolve

Maybe using 401 instead of 500 when SOA data is missing makes a 
difference for your proxy setup as well. If possible, try the new 
version, but not right now - I haven't got any successful downloads due 
to SunSolve's bad state in the last hours.

> Thanks for integrating this very useful proxy authentication feature!

You're welcome, and thanks for proposing it.

Martin.



More information about the pca mailing list