Mantis - Resin
Viewing Issue Advanced Details
5400 minor always 03-18-13 14:04 11-05-14 15:30
alex  
ferg  
normal  
closed 4.0.35  
won't fix  
none    
none  
0005400: mod_caucho: duplicate status line
The following request will return two HTTP statuses instead of one, breaking the HTTP spec if basic authentication is configured in resin.xml:
Code:
curl -vvv -X POST -H "Content-Type: text/xml" -H "Expect: 100-continue" --data-binary "<xml/>" -k -i http://ridder.uio.no/solr/update/ [^]
This returns:
Code:
> <xml/>HTTP/1.1 100 Continue
HTTP/1.1 100 Continue

< HTTP/1.1 401 Unauthorized
HTTP/1.1 401 Unauthorized
It seems that this only happens if basic authentication is configured in resin.xml and not in httpd.conf. If I'm sending the curl command above directly to Resin, I'm only getting 401 in return (not 100). It seems that Resin authentication configuration is not visible for Apache, something I consider as a Resin/mod_caucho bug.

The complete discussion and tests can be viewed in the following thread:
https://issues.apache.org/jira/browse/CONNECTORS-661 [^]

I have tested this behaviour with Resin Pro 4.0.35 and 4.0.27 together with Apache 2.2.22.

Notes
(0006228)
erlendfg   
03-25-13 06:00   
This problem occurs if mod_caucho is compiled with Resin 3 as well, so it should be fixed for both versions.
(0006551)
ferg   
11-05-14 15:30   
This case cannot be fixed in Resin 4 without a major restructuring of the mod_caucho/Resin protocol. If this configuration is required, using Apache as a HTTP proxy is the best workaround.