httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Andrew Schulman <and...@alumni.utexas.net>
Subject [users@httpd] Re: Multiple authencation prompts
Date Wed, 01 Jan 2014 12:23:24 GMT
> Hello,
> 
> I am using apache to host iOS related applications. I have integrated
> apache with our internal LDAP. When I try to access on a desktop it
> prompts for password only once. Where as in apple devices its
> prompting multiple times (I use plist). If the app consists of 4
> files, it prompts for password for 4 times.Can you please recommend a
> better way to handle this?

When you require HTTP authentication, the user's app or browser has to
send the username and password with each new request.  So if your page
uses 4 files, the browser has to send the username and password 4 times.

Most browsers hide this from the user by cacheing HTTP authentication
credentials (username and password), and presenting them again with each
new request.  So the user authenticates just once, and the browser takes
care of it after that.

It seems that your Apple devices aren't doing that.  Cacheing HTTP auth
credentials is a basic browser feature, so if they're not doing it, it
seems like a bug.

You don't have many choices.  You can remove the authentication
requirement; ignore the problem if it's limited to just a few buggy
apps; or change to an application-based method of authentication, using
forms and cookies (assuming those buggy apps handle cookies correctly).
Sorry.

Andrew


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message