 |
Using an e-mail address as a username is indeed a sound use case in general, but it is not immediately clear whether changing the RackCode syntax will have any immediate or delayed unwanted side effects. Is the "@bar" part the same in all usernames? If yes, and if the "foo" part is exactly one of the X.509 certificate fields, it may be simpler to configure the HTTP server to set the ''REMOTE_USER'' environment variable to the "foo" part only. Specifically for Apache httpd this would mean: https://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslusername https://httpd.apache.org/docs/2.4/mod/mod_ssl.html#authbasicfake https://httpd.apache.org/docs/2.4/mod/mod_ssl.html#ssloptions Without any knowledge of your configuration and the X.509 certificate structure, the best guess I could make is that the "foo" could be the CN, then ''SSLUserName SSL_CLIENT_S_DN_CN'' would strip the domain part. Please ask your X.509 administrator whether this makes sense and is implementable. |
|
|
"The email account that you tried to reach does not exist." |
- Anonymous
