Description of problem:

Using non-Basic auth makes mod_python.publisher always fail with a '400 Bad
Request' error code. E.g.

| SetHandler      mod_python
| PythonHandler   mod_python.publisher
| AuthType        Kerberos

will create headers like

| Authorization: Negotiate YIIE+gYJKoZIhvc...

publisher.py checks unconditionally (e.g. also when module does not make own
authentication but uses the default apache one) for base64 text at positions
[6:] in this header (which obviously works for 'Basic' auth  type only):

| def process_auth(req, object, realm="unknown", user=None, passwd=None):
|     ...
|     if not user and req.headers_in.has_key("Authorization"):
|         try:
|             s = req.headers_in["Authorization"][6:]
|             s = base64.decodestring(s)
|             user, passwd = s.split(":", 1)
|         except:
|             raise apache.SERVER_RETURN, apache.HTTP_BAD_REQUEST


mod_python-3.3.1 from Fedora 8 is not affected as it executes this check only,
when called handler has an own __auth*__ mechanism.


Version-Release number of selected component (if applicable):

mod_python-3.2.8-3.1