Mailing-List: contact commons-httpclient-dev-help@jakarta.apache.org;
 run by ezmlm
Precedence: bulk
Reply-To: "Commons HttpClient Project"
 <commons-httpclient-dev@jakarta.apache.org>
In-Reply-To: <BAY16-F87vCdMNo46f800018a94@hotmail.com>
To: "Commons HttpClient Project" <commons-httpclient-dev@jakarta.apache.org>
MIME-Version: 1.0
Subject: Re: TestWebappBasicAuth fails on IIS
From: Roland Weber <ROLWEBER@de.ibm.com>
Message-ID: 
 <OFCEFE3423.C77142F0-ONC1256E5C.00242254-C1256E5C.00250535@de.ibm.com>
Date: Fri, 19 Mar 2004 07:42:54 +0100
Content-Type: multipart/alternative;
 boundary="=_alternative 00249E88C1256E5C_="

--=_alternative 00249E88C1256E5C_=
Content-Type: text/plain; charset="US-ASCII"

Hi Dan,

I haven't looked into the test cases yet, so I don't know
about how many uid/pwd combinations we are talking here.
If it's only a few, you could create Windows users for them.
IIS still checks the Auth header, but it lets the request pass
through since it knows the user.
If that is not an option and resequencing of the IIS plugins
doesn't help, I'm out of ideas here.

cheers,
  Roland
 

"Dan Tran" <danttran@hotmail.com>
18.03.2004 20:06
Please respond to "Commons HttpClient Project"
 
        To:     commons-httpclient-dev@jakarta.apache.org
        cc: 
        Subject:        Re: TestWebappBasicAuth fails on IIS


Roland, I have IIS connecting to tomcat containing httpclienttest.war via 
iis_redirector, and run httpclienttest against iis.

As you have said, IIS does intercept the header.  I can either add the 
user/password hardcoded in the httpclienttest to IIS and run the test 
again, 
or I can figure out how to make IIS not to intercept the basic 
authentication.  The later one is the perfer way. but still no clue yet.

-Dan


>From: Roland Weber <ROLWEBER@de.ibm.com>
>Reply-To: "Commons HttpClient Project" 
><commons-httpclient-dev@jakarta.apache.org>
>To: "Commons HttpClient Project" 
><commons-httpclient-dev@jakarta.apache.org>
>Subject: Re: TestWebappBasicAuth fails on IIS
>Date: Thu, 18 Mar 2004 07:31:27 +0100
>
>Hello Dan,
>
>IIS will try to verify the authentication headers it gets.
>If your users and passwords are known to Windows,
>the requests should pass through just fine.
>
>What exactly is an "httpclient servlet"?
>
>Have you checked which plugins are active in IIS?
>Maybe you can move the plugin of your servlet
>engine in front of the IIS authentication, so the
>servlet gets the request before IIS authenticates it.
>
>I'm just guessing here, I only conducted a few
>authentication experiments with IIS last year.
>
>cheers,
>   Roland
>
>
>
>
>
>
>"Dan Tran" <danttran@hotmail.com>
>17.03.2004 17:28
>Please respond to "Commons HttpClient Project"
>
>         To:     "Commons HttpClient Project"
><commons-httpclient-dev@jakarta.apache.org>
>         cc:
>         Subject:        TestWebappBasicAuth fails on IIS
>
>
>Hello, I think IIS rejects any Basic Authentication request.  Is there a
>way
>to configure IIS to allow these
>request to passthru to httpclient servlets?
>
>Any suggestions?
>
>-Dan
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail:
>commons-httpclient-dev-unsubscribe@jakarta.apache.org
>For additional commands, e-mail:
>commons-httpclient-dev-help@jakarta.apache.org
>
>

_________________________________________________________________
Find a broadband plan that fits. Great local deals on high-speed Internet 
access. http://click.atdmt.com/AVE/go/onm00200360ave/direct/01/


---------------------------------------------------------------------
To unsubscribe, e-mail: 
commons-httpclient-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: 
commons-httpclient-dev-help@jakarta.apache.org


--=_alternative 00249E88C1256E5C_=--