apache removes digest headers

I have implemented basic and digest authentication in .Net using an http module (ala Greg Reinacker[1] and eggheadcafe[2]).
I am now trying to run this with Mono[3] on Fedora Core 3 and Apache.
The set up is OK. I can run the test xsp stuff happily. However, when I set up any sites that need Digest Auth I can never get access.
What seems to be happening is Apache is stripping the Digest headers from the request before passing it on to mod_mono, so my .Net code can't process them. For every request I get the UserName/Password prompt in the browser.
How can I turn off Apache's Digest stuff? How can I stop Apache stripping these headers out? Help!

[1] http://www.rassoc.com/gregr/weblog/stories/2002/07/09/webServicesSecurityHttpDigestAuthenticationWithoutActiveDirectory.html
[2] http://www.rassoc.com/gregr/weblog/stories/2002/07/09/webServicesSecurityHttpDigestAuthenticationWithoutActiveDirectory.html
[3] http://www.mono-project.com/Main_Page
LVL 4
davekyAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Isil_ZhaCommented:
This page describes how digest authentication works:
http://apache.active-venture.com/auth-digest.html
But you should keep in mind the disadvantages that page states.

About turning it off: there is no need to turn it off in Apache itself. You just need to change the digest authentification in your .htacces file to "basic".
This is described here:
http://apache.active-venture.com/auth-basic.html
davekyAuthor Commented:
Thanks, but I know exactly how digest works. (If you had followed any of the links you would have seen that I am using a bespoke module in mono that implements it.) As for no need to turn it off - there certainly is! I want it to ignore any digest headers.

However, it seems that this "bug" has been resolved in a newer version of Apache. I have got round this problem by upgrading. It wasn't pretty but it had to be done.

I shall be asking for points to be refunded here. Cheers.

PS for anybody following link [2] in my first post should have been http://www.eggheadcafe.com/articles/20030701.asp
DarthModCommented:
PAQed with points (250) refunded

DarthMod
Community Support Moderator

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Apache Web Server

From novice to tech pro — start learning today.