After spending more time than I care to admit working on a problem I actually solved in May, I decided I’d better blog this before I forget again.<\/p>\n
Using ActivePerl<\/a>, it is possible to run perl CGI scripts under Microsoft IIS. In a default installation, the extention to use is .plx (not .cgi), which is mapped to run under Of course, I’m relying on Basic authentication, which you should only do if your script will only be available via HTTPS (as is mine). The whole thing is dependant on Fortunately, fixing this is simple, if a bit non-evident. In the IIS Management Console, navigate to the folder containing your script, and select the script. Right-click and choose properties. On the File Security tab of the properties dialog, click the Edit button under “Anonymous Access”. On the next dialog, make sure that “Annonymous Access” is checked and that no other authentication method<\/strong> is checked. By default, Windows Integrated Authentication is selected, which makes IIS snoop around the header, and apparently lose it.<\/p>\n For multiple scripts, put them all in one location (go on, call it After spending more time than I care to admit working on a problem I actually solved in May, I decided I’d better blog this before I forget again. Using ActivePerl, it is possible to run perl CGI scripts under Microsoft IIS. In a default installation, the extention to use is .plx (not .cgi), which is […]<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[],"class_list":["post-197","post","type-post","status-publish","format-standard","hentry","category-perl"],"_links":{"self":[{"href":"https:\/\/jclark.org\/weblog\/wp-json\/wp\/v2\/posts\/197","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jclark.org\/weblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jclark.org\/weblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jclark.org\/weblog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jclark.org\/weblog\/wp-json\/wp\/v2\/comments?post=197"}],"version-history":[{"count":0,"href":"https:\/\/jclark.org\/weblog\/wp-json\/wp\/v2\/posts\/197\/revisions"}],"wp:attachment":[{"href":"https:\/\/jclark.org\/weblog\/wp-json\/wp\/v2\/media?parent=197"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jclark.org\/weblog\/wp-json\/wp\/v2\/categories?post=197"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jclark.org\/weblog\/wp-json\/wp\/v2\/tags?post=197"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}PerlIS.dll<\/code>, the “Perl for ISAPI<\/a>” implementation. Works pretty well. The issue I had was with HTTP Authentication. If you want to handle your own authentication in a CGI script, you can check the Environment variable HTTP_AUTHORIZATION<\/code>. For example:<\/p>\nbinmode(STDOUT, ":utf8"); #you know you should\n\nmy $have_authinfo = (defined($ENV{HTTP_AUTHORIZATION}) \n and (substr($ENV{HTTP_AUTHORIZATION},0,6) eq 'Basic '));\n\nmy ($user, $pass) = ('','');\nif ($have_authinfo) {\n my $decoded = decode_base64(substr($ENV{HTTP_AUTHORIZATION},6));\n\n if ($decoded =~ \/:\/) {\n ($user, $pass) = split(\/:\/, $decoded);\n } else {\n $have_authinfo = 0;\n }\n}\n\nif (!$have_authinfo or !Authorize($user, $pass)) {\n print << "EOF";\nHTTP\/1.1 401 Authorization Required\nWWW-Authenticate: Basic realm="Example.com"\nContent-Type: text\/plain; charset=utf-8\n\nYou must supply valid credentials to access this resource\n\nEOF\n close STDOUT;\n exit 0;\n}\n\n#Authorized, continue with web page....\n\nsub Authorize {\n my ($user, $pass) = @_;\n #Do something to authenticate, return true\/false\n}<\/code><\/pre>\n$ENV{HTTP_AUTHORIZATION}<\/code>, which by default won’t actually get passed to your script under IIS and PerlIS.<\/p>\ncgi-bin<\/code>), and make the same changes above to the whole folder. New scripts created in this folder should inherit the settings. <\/p>","protected":false},"excerpt":{"rendered":"