Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations wOOdy-Soft on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

how get username in customlog for ssl requests

Status
Not open for further replies.

espar

Programmer
May 13, 2002
66
AU
I have added Username (%u) in SSL customlog which outputs the auth name correctly, however it does not show up in virtualweb customlog (get "-" ie no data).

Is there any way of getting the username to show in virtualhost customlog??

Environment : RedHat7.1, Apache 1.3.27
Web Hosting environment - SharedSSL and Virtualhosting
 
espar,

I believe, and I could be wrong, that if you set up .htaccess for your SSL DocumentRoot, the user data will be in your logs. Without .htaccess (and .htpasswd) there will be no way for Apache to grok a user name.



Wishdiak
 
Hi Wishdiak,

Unfortunately not... The site in question does have an .htaccess in their ssl directory, but the auth is apparently handled by the SSL module not apache.

It appears that they dont share information - it cant be for security reasons as /var/log/http/ssl_request_log is world readable.

I know that i could tell the client this and then tell them to write a 1 line cgi to grep their data, but i have found it is best not to let clients know how much stuff they can do with cgi on a shared environment, it only worries them :)

Espar
 
espar,

From what I've been able to find on Google, Shared SSL is simply a SSL key issued from your web host's Certificate Authority, rather than your domain's CA.

If Apache is set up to use this CA and key, any users would still need to pass some user/pass authentication in order for Apache to have a user name to log. A simple .htaccess/.htpasswd would allow Apache to log the user. How is the user authentication done now?



Wishdiak
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top