RE: Cosign Loop Breaking

[Bill Doster <Bill.Doster@xxxxxxxxx>]

> I believe the bad configuration is having the action on the login form set
> incorrectly (at least this is the one I know about). If the action is set
> such that apache redirects (or re-writes the URL) via a GET rather than a
> POST it will lose the data attached, and then the CGI displays the login
> page.
>
> I agree that this is a case of bad configuration, and perhaps, after further
> thought I do not think it would really be worth extra work to detect it. If
> the Sys Admin sets it up incorrectly then that is their fault. Perhaps a
> good thing would be some detailed installation documentation which would
> help this problem (and others) to no end.

If this is a configuration problem, perhaps some kind of "test script" which
acts like a browser and checks for common misconfiguration problems could
be included in the distribution and recommended for vetting new configurations?