Getting the Username

[wojnosystems]

How are underlying apps determining the username? I'm attempting to deploy an internal MoinMoin wiki with SPNEGO over Kerberos. I have the Kerberos part down, but MoinMoin doesn't know what the username for the person should be.

Typically, the upstream SPNEGO system will set a header called REMOTE_USER with the username content of the principal name: https://wiki.python.org/moin/HelpOnAuthentication#Given_authentication

[stnoonan]

A REMOTE_USER header does get set.

[wojnosystems]

Alright. I'll take a look at it again on Monday. I had uWSGI dump the headers and REMOTE_USER was not set.

On further research, it appears as though it needs to be set in the uwsgi_params setting:

uwsgi_param REMOTE_USER $remote_user;
uwsgi_param AUTH_TYPE Basic;

http://trac.nginx.org/nginx/ticket/69

I have not tested this, yet.

[stnoonan]

Yes, sorry. We set the nginx variable $remote_user, which you can use to set a header yourself. This is the way, as far as I know, every authentication module in nginx works.

[wojnosystems]

Yup. You're right. Sorry for the noise.