Recommended Changes for Ticket Authentication with EZproxy 4.0a

In EZproxy 4.0a GA (2006-08-02), the behavior of key authentication and authorization methods was unified. As part of this change, the default behavior for Ticket authentication changed when dealing with expired tickets. If your Ticket configuration does not have any Expired directives and you want to retain the original behavior, then after the MD5 or SHA1 directive, you need to add:

Expired; Deny texpired.htm

such as changing:

::Ticket
TimeValid 5
MD5 verysecret
/Ticket


to

::Ticket
TimeValid 5
MD5 verysecret
Expired; Deny texpired.htm
/Ticket


If you are unclear whether or not this applies to your configuration, please contact support@oclc.org for assistance.