Dariusz Pietrzak wrote:
> 
> > I'm not sure if it's actually possible to do this. When you use HTTP
> > Authentication, the user's web browser remembers the username and password
> > that they typed in, and automatically sends it with all subsequent
> > requests to the server. I'm not sure if there is a way for the server to
> > tell the web browser to stop sending the password.
> Hmm, that's a pity.
>  I adapted solution from examples: dev/auth/global.asa to my needs and it
> seems to solve the problem, I only hoped for more clean solution.
> At least it works for mozilla.
> 

I'm not sure I ever fully solved the auth problem in dev/auth/global.asa
The problem I don't think I solved was something with IE saving the 
password & then when prompted for a login again, you hit cancel in
IE and it lets you in.

I think to fully bust IE's 401 cache, you need to fully control
the auth process and not rely on Apache for any bit of it, so 
that you can control the auth realm on each request.

--Josh

_________________________________________________________________
Joshua Chamas                           Chamas Enterprises Inc.
NodeWorks <- Web Link Checking          Huntington Beach, CA  USA 
http://www.nodeworks.com                1-714-625-4051

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to