DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=29439>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=29439

Credentials ignored if realm specified in preemptive authentication





------- Additional Comments From [EMAIL PROTECTED]  2004-06-08 13:22 -------
Philipe,

As you have already noticed, this is not a bug. The behaviour is caused by the
nature of Basic authentication: preemptive authentication can be done if and
only if credentials for the null realm exist.

> But, it should not be possible to set a realm when using preemptive mode, or at 
> least it should not be silently ignored.

You can use the same HttpState object to connect to different sites. It makes
sense to both have credentials with and without realm and preemptive
authentication enabled.

What we could do, is issue a warning if preemptive auth is enabled but no
credentials for the null realm are available. This could actually be an
enhancement to 2.0 branch, which you are reporting the bug against.

Would this approach help you?

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to