Dariusz Pietrzak wrote: > > > I'm not sure if it's actually possible to do this. When you use HTTP > > Authentication, the user's web browser remembers the username and password > > that they typed in, and automatically sends it with all subsequent > > requests to the server. I'm not sure if there is a way for the server to > > tell the web browser to stop sending the password. > Hmm, that's a pity. > I adapted solution from examples: dev/auth/global.asa to my needs and it > seems to solve the problem, I only hoped for more clean solution. > At least it works for mozilla. > I'm not sure I ever fully solved the auth problem in dev/auth/global.asa The problem I don't think I solved was something with IE saving the password & then when prompted for a login again, you hit cancel in IE and it lets you in. I think to fully bust IE's 401 cache, you need to fully control the auth process and not rely on Apache for any bit of it, so that you can control the auth realm on each request. --Josh _________________________________________________________________ Joshua Chamas Chamas Enterprises Inc. NodeWorks <- Web Link Checking Huntington Beach, CA USA http://www.nodeworks.com 1-714-625-4051 --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]