Should SM_User: populate HTTP_SM_USER?

There's a rather spirited discussion between me and David Wang of the
Microsoft IIS team going on here:

http://tinyurl.com/gpdyr
http://blogs.msdn.com/david.wang/archive/2006/04/20/HOWTO_Retrieve_Request_Headers_using_ISAPI_ASP_and_ASP_Net.aspx

To boil it down, the question is this:

Given a request with header
SM_User: foo

.... and with NO SM-User: header...

Should the CGI environment variable HTTP_SM_USER expand to "foo"?

I'm under the impression that it should. However, IIS does not, and
David is trying to defend IIS's behavior by saying that the spec is not
clear.

What do you think? Is the spec clear? Is IIS's behavior correct?

Operationally, this question is of little import as IIS (since version
6) does populate the non-standard HEADER_SM_USER variable to "foo".


--
PLEASE NOTE: comp.infosystems.www.authoring.cgi is a
SELF-MODERATED newsgroup. aa.net and boutell.com are
NOT the originators of the articles and are NOT responsible
for their content.

HOW TO POST to comp.infosystems.www.authoring.cgi:
http://www.thinkspot.net/ciwac/howtopost.html

.

Relevant Pages

  • Re: credentials not going to IIS automatically
    ... Cubicle Wars - http://www.windwardreports.com/film.htm ... "David Wang" wrote: ... IE's auto-login feature is tied to the Zone that it classifies the ... Once you configure authentication in IIS, ...
    (microsoft.public.inetserver.iis.security)
  • Re: [IIS6] Cookieless : control HTTP 302
    ... David Wang wrote: ... > Basically, you inserted a proxy in the middle of everything, which IIS ... system over session handling or should i forget this idea? ...
    (microsoft.public.inetserver.iis)
  • Re: IIS 5.1 execution questions - application failed to initialize
    ... David Wang Wrote: ... "I believe that XP introduced some CMD.EXE security lockdown code such that ... WshShell.Run from IIS doesn't work. ... internet. ...
    (microsoft.public.inetserver.iis)
  • Re: Order of Logged Options
    ... I understand that and wasn't trying to imply that IIS isn't within ... specifications (I figured any good spec isn't going to be so fixed in ... nature), just that IIS has been using the same order for a while and all of ...
    (microsoft.public.inetserver.iis)
Loading