Return-Path: 
 <tomcat-user-return-47771-qmlist-jakarta-archive-tomcat-user=jakarta.apache.org@jakarta.apache.org>
Delivered-To: apmail-jakarta-tomcat-user-archive@apache.org
Received: (qmail 63839 invoked from network); 8 Jan 2003 16:18:01 -0000
Received: from exchange.sun.com (192.18.33.10)
  by daedalus.apache.org with SMTP; 8 Jan 2003 16:18:01 -0000
Received: (qmail 24760 invoked by uid 97); 8 Jan 2003 16:18:39 -0000
Delivered-To: qmlist-jakarta-archive-tomcat-user@jakarta.apache.org
Received: (qmail 24605 invoked by uid 97); 8 Jan 2003 16:18:37 -0000
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
List-Subscribe: <mailto:tomcat-user-subscribe@jakarta.apache.org>
List-Help: <mailto:tomcat-user-help@jakarta.apache.org>
List-Post: <mailto:tomcat-user@jakarta.apache.org>
List-Id: "Tomcat Users List" <tomcat-user.jakarta.apache.org>
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Received: (qmail 24557 invoked by uid 98); 8 Jan 2003 16:18:36 -0000
X-Antivirus: nagoya (v4218 created Aug 14 2002)
From: "Andreas Probst" <andpro77@gmx.net>
To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
Date: Wed, 08 Jan 2003 17:17:32 +0100
MIME-Version: 1.0
Subject: Re: Question about Tomcat 4.1.12 WebDAV application
Message-ID: <3E1C5D2C.8496.E059FD@localhost>
Priority: normal
In-reply-to: 
 <OF6359C306.5B564339-ON85256CA8.00519A60-85256CA8.00558D19@notes.duke.edu>
X-mailer: Pegasus Mail for Windows (v4.02a)
Content-type: text/plain; charset=US-ASCII
Content-transfer-encoding: 7BIT
Content-description: Mail message body
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N

Hi Jim,

it might be that Windows cached your credentials. You could try 
Slide client (jakarta sub project Slide), which requires to type 
in the credentials everytime you start it.
You won't need to start the Slide server or the included Tomcat, 
just the client at pathTo\jakarta-slide-
1.0.16\client\bin\run.bat. (It might be necessary to start 
run.bat by typing bin\run in the client directory.)

Andreas


On 8 Jan 2003 at 10:34, Jim Coble wrote:

> Version: Tomcat 4.1.12 on Solaris 8
> 
> I'm trying to configure the WebDAV application included in the
> Tomcat 4.1.12 distribution so that it requires a login to add or
> remove files but not to view them.
> 
> If I use the web.xml security-constraint contained in the
> distribution --
> 
>   <security-constraint>
>     <web-resource-collection>
>       <web-resource-name>The Entire Web
>       Application</web-resource-name>
>       <url-pattern>/*</url-pattern>
>     </web-resource-collection>
>     <auth-constraint>
>       <role-name>tomcat</role-name>
>     </auth-constraint>
>   </security-constraint>
> 
> -- then all attempts to access the content, including a simple
> browser request for <http://localhost:8080/webdav/> require a
> login.
> 
> I thought I could password protect only adding and removing files
> by adding <http-method> for PUT and DELETE as shown below --
> 
>   <security-constraint>
>     <web-resource-collection>
>       <web-resource-name>The Entire Web
>       Application</web-resource-name>
>       <url-pattern>/*</url-pattern>
>       <http-method>DELETE</http-method>
>       <http-method>PUT</http-method>
>     </web-resource-collection>
>     <auth-constraint>
>       <role-name>tomcat</role-name>
>     </auth-constraint>
>   </security-constraint>
> 
>   -- but, if I do that, I seem to be able to add and remove files
>   using my
> WebDAV client (Web Folders on Windows XP) without authenticating.
> 
> I can't help but think that I'm missing something obvious.  Can
> anyone help?
> 
> Thanks in advance.
> --Jim
> 
> ==================================
> Jim Coble
> Senior Technology Specialist
> Center for Instructional Technology
> Email: jim.coble@duke.edu
> Voice: 919-660-5974  Fax: 919-660-5923
> Box 90198, Duke University
> Durham, NC 27708-0198
> ==================================
> 
> 
> 
> 
> --
> To unsubscribe, e-mail:  
> <mailto:tomcat-user-unsubscribe@jakarta.apache.org> For
> additional commands, e-mail:
> <mailto:tomcat-user-help@jakarta.apache.org>
> 



--
To unsubscribe, e-mail:   <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-user-help@jakarta.apache.org>