From d8883f4346400c2cef937497b12e87df0a6d2876 Mon Sep 17 00:00:00 2001 From: Daniel Black Date: Mon, 29 Jul 2013 08:59:25 +1000 Subject: [PATCH] DOC: Notes about 401 responses and how apache logs this --- config/filter.d/apache-auth.conf | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/config/filter.d/apache-auth.conf b/config/filter.d/apache-auth.conf index 0db34523..2b1397cf 100644 --- a/config/filter.d/apache-auth.conf +++ b/config/filter.d/apache-auth.conf @@ -16,8 +16,9 @@ before = apache-common.conf # from the modules in aaa that return HTTP_UNAUTHORIZED, HTTP_METHOD_NOT_ALLOWED or # HTTP_FORBIDDEN and not AUTH_GENERAL_ERROR or HTTP_INTERNAL_SERVER_ERROR. # -# As an unauthorized response is the first step for a browser to instigate authentication -# so don't set max retry too low. +# An unauthorized response 401 is the first step for a browser to instigate authentication +# however apache doesn't log this as an error. Only subsequent errors are logged in the +# error log. # # Source: #