{"action":"created","issue":{"url":"https://api.github.com/repos/LinOTP/LinOTP/issues/31","repository_url":"https://api.github.com/repos/LinOTP/LinOTP","labels_url":"https://api.github.com/repos/LinOTP/LinOTP/issues/31/labels{/name}","comments_url":"https://api.github.com/repos/LinOTP/LinOTP/issues/31/comments","events_url":"https://api.github.com/repos/LinOTP/LinOTP/issues/31/events","html_url":"https://github.com/LinOTP/LinOTP/issues/31","id":150376703,"number":31,"title":"/selfservice doesn't honor REMOTE_USER header","user":{"login":"splashx","id":1154133,"avatar_url":"https://avatars.githubusercontent.com/u/1154133?v=3","gravatar_id":"","url":"https://api.github.com/users/splashx","html_url":"https://github.com/splashx","followers_url":"https://api.github.com/users/splashx/followers","following_url":"https://api.github.com/users/splashx/following{/other_user}","gists_url":"https://api.github.com/users/splashx/gists{/gist_id}","starred_url":"https://api.github.com/users/splashx/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/splashx/subscriptions","organizations_url":"https://api.github.com/users/splashx/orgs","repos_url":"https://api.github.com/users/splashx/repos","events_url":"https://api.github.com/users/splashx/events{/privacy}","received_events_url":"https://api.github.com/users/splashx/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-04-22T13:57:28Z","updated_at":"2016-12-02T14:49:44Z","closed_at":null,"body":"When the user is authenticated externally and Apache sets REMOTE_USER, e.g. via `/etc/apache2/sites-available/linotp2.conf`:\n\n`RequestHeader set X_REMOTE_USER           $REMOTE_USER`\n\nLinOTP fails to authenticate the user, even though the user exists in the in one resolver (ATM there is just one resolver and one REALM for tests).\n\nAlthough [supposed](https://github.com/LinOTP/LinOTP/blob/d3f496f7685658d480163c5916552580543529bb/linotpd/src/linotp/lib/user.py#L376) to process the REMOTE_USER header (it even picks it up, based on the log [trace](https://gist.github.com/splashx/185f7e0ba0a8673f8834b384ce74dbbd#file-linotp-log-L16)), the authentication fails with: \n\n```\n401 Unauthorized\n\nThis server could not verify that you are authorized to access the document you requested. Either you supplied the wrong credentials (e.g., bad password), or your browser does not understand how to supply the credentials required.\n\nYou are not authenticated\n```\n\nThoughts?\n"},"comment":{"url":"https://api.github.com/repos/LinOTP/LinOTP/issues/comments/264470614","html_url":"https://github.com/LinOTP/LinOTP/issues/31#issuecomment-264470614","issue_url":"https://api.github.com/repos/LinOTP/LinOTP/issues/31","id":264470614,"user":{"login":"keyidentity-mirko","id":12896502,"avatar_url":"https://avatars.githubusercontent.com/u/12896502?v=3","gravatar_id":"","url":"https://api.github.com/users/keyidentity-mirko","html_url":"https://github.com/keyidentity-mirko","followers_url":"https://api.github.com/users/keyidentity-mirko/followers","following_url":"https://api.github.com/users/keyidentity-mirko/following{/other_user}","gists_url":"https://api.github.com/users/keyidentity-mirko/gists{/gist_id}","starred_url":"https://api.github.com/users/keyidentity-mirko/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/keyidentity-mirko/subscriptions","organizations_url":"https://api.github.com/users/keyidentity-mirko/orgs","repos_url":"https://api.github.com/users/keyidentity-mirko/repos","events_url":"https://api.github.com/users/keyidentity-mirko/events{/privacy}","received_events_url":"https://api.github.com/users/keyidentity-mirko/received_events","type":"User","site_admin":false},"created_at":"2016-12-02T14:49:44Z","updated_at":"2016-12-02T14:49:44Z","body":"Hi,\r\n\r\nthe login is doing a form based authentication. For login the user has to provide his native password. So it is not possible to hand on authentication details from the Apache.\r\n\r\nBest Regards,\r\n\r\nMirko"}}
{"actor":{"display_login":"keyidentity-mirko"}}