Ensure that the REMOTE_USER variable is correctly written when the user

has been authenticated from a session.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@649113 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/modules/aaa/mod_auth_form.c b/modules/aaa/mod_auth_form.c
index 8550dd8f96f5c4601d876c80c8080554727f3b2f..c1186d56f064c96487dc4711d01b14dedc597c8d 100644 (file)
--- a/modules/aaa/mod_auth_form.c
+++ b/modules/aaa/mod_auth_form.c
@@ -538,6 +538,11 @@ static apr_status_t get_session_auth(request_rec * r,
         ap_session_get(r, z, apr_pstrcat(r->pool, authname, "-" MOD_AUTH_FORM_HASH, NULL), hash);
     }
 
+    /* set the user, even though the user is unauthenticated at this point */
+    if (user && *user) {
+        r->user = (char *) *user;
+    }
+
     return APR_SUCCESS;
 
 }