Apache with mod_auth_radius starts X requests

[Alan DeKok]

On Aug 17, 2018, at 4:44 AM, Carsten Schulze <carsten.schulze at leuphana.de> wrote:
> We have got a normal Webpage.  The Index.php was delivered, I enter the username + password, one Radius-Request was send and I can work.

  That's good.

> --------
> The second server is a software distribution with directory listing.  There are no  index files or so.

  Maybe that's the issue?

> I turned on the logging on my apache and I can see the auth requests for:
> 
> requests /Mitarbeitende/
> requests /Mitarbeitende/index.html
> requests /Mitarbeitende/index.cgi
> requests /Mitarbeitende/index.pl
> requests /Mitarbeitende/index.php
> requests /Mitarbeitende/index.xhtml
> requests /Mitarbeitende/index.htm
> 
> and for every subfolder the same

  That's bad.  The module is *supposed* to set a cookie which means that subsequent authentication checks just check the cookie.  Maybe that isn' happening.

  Alan DeKok.