From d49d7764bd8fe3d3f6589e856b558d14fa554b7a Mon Sep 17 00:00:00 2001
From: Dirkjan Ochtman <dirkjan@ochtman.nl>
Date: Sun, 24 Jan 2016 17:35:12 +0100
Subject: [PATCH] Add note about passing HTTP auth headers when running as
 FastCGI

Signed-off-by: Dirkjan Ochtman <dirkjan@ochtman.nl>
---
 doc/setup.rst | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/doc/setup.rst b/doc/setup.rst
index 5fd679f776..78bc4244ea 100644
--- a/doc/setup.rst
+++ b/doc/setup.rst
@@ -593,6 +593,15 @@ HTTP authentication mode
 * Is supported with most PHP configurations. For :term:`IIS` (:term:`ISAPI`)
   support using :term:`CGI` PHP see :ref:`faq1_32`, for using with Apache
   :term:`CGI` see :ref:`faq1_35`.
+* When PHP is running under Apache's :term:`mod_proxy_fcgi` (e.g. with PHP-FPM),
+  :term:`Authorization` headers are not passed to the underlying FCGI application,
+  such that your credentials will not reach the application. In this case, you can
+  add the following configuration directive:
+
+  .. code-block:: apache
+
+     SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
+
 * See also :ref:`faq4_4` about not using the :term:`.htaccess` mechanism along with
   ':term:`HTTP`' authentication mode.