I have an ivy-default local repository configured to *not* permit anonymous
read access - it requires credentials even for read access. The problem is
that if I visit a valid location in a repository without credentials (e.g.
http://myserver/artifactory/libs-release-local/org/my_module) then
Artifactory shows an empty directory listing. It does not report any error
regarding unauthorised access. This means that when I'm using Gradle to
resolve dynamic version numbers e.g. org:my_module:1.2.+ then Gradle first
does an HTTP query without credentials, it sees that there's nothing in the
directory so it does not attempt to try again using credentials.

Under Security > General I do not have 'Hide existence of unauthorised
resources' ticked. According to the pop-up help this suggests that it should
request credentials by sending a 401 status code. It may well be doing that
for a url to an artifact (e.g.
http://myserver/artifactory/libs-release-local/org/my_module/1.2.3.4) but
not when listing the contents of the my_module directory.

I'm using Artifactory 2.6.7. Is this a defect in Artifactory? Or is there
some hidden configuration to do what I need? 

Thanks,
Neil



--
View this message in context: 
http://forums.jfrog.org/Directory-listing-with-no-credentials-and-no-anonymous-access-tp7578723.html
Sent from the Artifactory - Users mailing list archive at Nabble.com.

------------------------------------------------------------------------------
Own the Future-Intel(R) Level Up Game Demo Contest 2013
Rise to greatness in Intel's independent game demo contest. Compete 
for recognition, cash, and the chance to get your game on Steam. 
$5K grand prize plus 10 genre and skill prizes. Submit your demo 
by 6/6/13. http://altfarm.mediaplex.com/ad/ck/12124-176961-30367-2
_______________________________________________
Artifactory-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/artifactory-users

Reply via email to