Page History

...

Note that if you protect a directory with CU WebAuth and you go to the non-SSL site you will get the following error "CUWebAuth error... Server is not properly configured. Check the Kerberos principal.". In this case you need to be sure to specify the "https" URL and not the "http" URL to avoid getting the error. If you wish to setup a redirect from the non-SSL site to the SSL site for the ".htaccess" protected directory you'll either need to specify the redirect in a parent directory or via a custom vhost virtualhost include.

Migrating from a "legacy" configuration

...

This will case a problem for new "HTTP" configurations since CUWebAuth is not loaded for non-SSL traffic. One possible fix is to remove "require noprompt" if you wish to have no CUWebAuth protection.  Note that special care should be taken to ensure that there are no directories beneath that were expecting cuwebauth to be enabled.  This can be tricky configuration to verify that there is no risk of exposing files that should be protected.

Example of a problem configuration #2 (require valid-user)

...