From 9605760cff84574a013bf337f6cefae2b4f424f6 Mon Sep 17 00:00:00 2001 From: Eric Covener Date: Sun, 19 Feb 2023 18:59:44 +0000 Subject: fixups vs. early in check_authn [skip ci] git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1907762 13f79535-47bb-0310-9956-ffa450edef68 --- docs/manual/mod/mod_ssl.xml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) (limited to 'docs/manual/mod/mod_ssl.xml') diff --git a/docs/manual/mod/mod_ssl.xml b/docs/manual/mod/mod_ssl.xml index e196e6e2fd..dbe3345da7 100644 --- a/docs/manual/mod/mod_ssl.xml +++ b/docs/manual/mod/mod_ssl.xml @@ -1538,7 +1538,13 @@ The available options are:

Note that the AuthBasicFake directive within mod_auth_basic can be used as a more general mechanism for faking basic authentication, giving control over the - structure of both the username and password.

+ structure of both the username and password.

+ + Unlike the FakeBasicAuth + option, the AuthBasicFake directive + does not set an Authorization header early enough to be processed by authentication + and authorization in the local server, it is only intended for upstream servers. +

The usernames used for FakeBasicAuth must not -- cgit v1.2.3