By default, mod_ucam_webauth redirects clients to the canonical server hostname so that cookies end up set on that domain. That is not desirable behaviour on some environments, e.g. the SRCF where the ServerName (as set by the system administrator) might not match the user's preferred domain, and might cause the cookie to go missing if the website forces redirection to a non-canonical ServerAlias.

So, I've added a new configuration directive (AACanonicaliseName) to allow this behaviour to be overridden (either globally, in a block or in .htaccess). If "AACanonicaliseName off" is configured, mod_ucam_webauth will not explicitly redirect to the canonical name, and will let ap_construct_url determine what name to use when a full self-referential URL is needed (according to Apache's UseCanonicalName directive). I have not changed the default behaviour.

The SRCF has been running with an early version of this patch for many years without issue.