Hi folks, I use a custom auth module with performs connection-legged authentication. I do see duplicate WWW-Authenticate headers in the response from the server. [Thu Jul 17 10:40:19 2014] [error] [client <IP>] authenticating main request [Thu Jul 17 10:40:19 2014] [error] [client <IP>] no Authorization header [Thu Jul 17 10:40:20 2014] [error] [client <IP>] authenticating main request [Thu Jul 17 10:40:20 2014] [error] [client <IP>] calling accept_sec_context [Thu Jul 17 10:40:20 2014] [error] [client <IP>] Negotiate: done: 0/0 [Thu Jul 17 10:40:20 2014] [error] [client <IP>] Authenticating subrequest [Thu Jul 17 10:40:20 2014] [error] [client <IP>] Negotiate: done: 0/0 The last two lines result in duplicate output. The question is, what is the purpose of the subrequest in genereal and why is a subrequest issued at at when my auth method is hooked with: ap_hook_check_user_id()? How should I take care of that to avoid duplicate output? if(ap_is_initial_req(r) return DECLINED; does not solve the problem. Thanks, Michael --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx