Skip navigation



WebAuth 3.2.3 Announcement

The ITSS WebAuth team is pleased to announce Stanford WebAuth 3.2.3, a bug fix release. This release fixes long delays for some clients after redirects generated by the WebAuth module, and as such is a recommended upgrade for all installations.

For documentation and downloads of WebAuth 3.2.3, see:


In this release, we've also updated the pre-build version of Apache to Apache 2.0.49 and have updated the versions of all the pre-built stow packages to their current versions. Pre-built binaries are, as before, available for Solaris 8 and 9.

New with this release, experimental Debian modules are also available. Please note that these are for Debian unstable/testing, not for Debian stable at this time (although a backport to stable is planned). Please also note that this is the first release of the Debian modules, and feedback and bug reports are welcome and encouraged. To install the Debian package, add the line:

    deb unstable main non-free contrib

to your /etc/apt/sources.list file (eventually there will be a more official URL) and then do:

    apt-get update
    apt-get install libapache2-webauth

Then, read /usr/share/doc/libapache2-webauth/README.Debian for information about how to complete your documentation. For the configuration options mentioned there, see the regular WebAuth installation instructions; we'll eventually have a better page solely for Debian users.

Many thanks to pod for the initial Debian build rules and for other modifications to the package to make it work better in a Debian environment.

The user-visible changes in this release are:

  • Long delays for some clients after redirects from mod_webauth should improve. The redirect was being returned without a body but also without a Content-Length, forcing clients supporting keep-alive to wait for a timeout. This may (but hopefully won't) cause more looping problems.

  • The WebKDC package now looks at /etc/webkdc/webkdc.conf and paths can be overridden by modifying that file.

  • Replaced the sample weblogin server templates with generic templates that don't use any Stanford-copyrighted logos or design.

  • Install a man page for wa_keyring and the header file for the webauth library.

  • Added configuration and rules for Debian packages.

Last modified Friday, 12-Dec-2014 02:31:13 PM

Stanford University Home Page