I do not want apache "doing basic auth". I want to do it in the cgi script myself, and as I understand RFC3875, the headers in question should be passed for that purpose. Thanks anyway Rodrigo On Sun, 1 Mar 2020, Eric Covener wrote: > If Apache isn't doing basic auth, it can't supply REMOTE_USER to you, > because it hasn't authenticated anyone. Similar for AUTH_TYPE -- the > server hasn't done any auth. > Authorization isn't passed by default intentionally as a typical CGI > has no business w/ the users credentials. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx