Description of problem:
When using Kerberos for Negotiate authentication to EPEL5's Kojiweb, mod_python returns "400 Bad Request".

Using:
koji-web-1.6.0-1.el5
mod_python-3.2.8-3.1

This is the result of https://bugzilla.redhat.com/431684 .

I was able to hack Kojiweb's publisher to simply drop the Authorization header before passing it on to mod_python. This is not as robust as fixing mod_python itself, but it at least fixes Kojiweb in my use case.

--- publisher.py.orig	2011-03-04 14:34:01.000000000 -0500
+++ publisher.py	2011-03-04 14:51:07.000000000 -0500
@@ -36,4 +36,8 @@
 mod_python.publisher.publish_object = publish_object
 
 def handler(req):
+    # mod_python in EL5 breaks on non-basic auth.
+    # https://bugzilla.redhat.com/431684
+    if req.headers_in.has_key("Authorization"):
+       del req.headers_in["Authorization"]
     return mod_python.publisher.handler(req)