Hi Bertrand Yes, the login to WebDav failed but I also was not able to login to the Sling (http://<Server and Port>/) did deliver a OpenId login page where I did not know what to enter to login. 'admin' did not work for me there.
-Andy On Feb 22, 2010, at 3:12 AM, Bertrand Delacretaz wrote: > Hi Andreas, > > On Sun, Feb 21, 2010 at 8:27 PM, Andreas Schaefer <[email protected]> wrote: >> The Blog works perfectly for me but I had to take two more steps to make it >> work with the security:... >> >> 1) Check off 'Login Form' in 'Apache Sling Authorization Header >> Authenticator' >> >> 2) Check off 'Access auth resources anonymously' in 'Apache Sling OpenID >> Authenticator' >> >> I am not an expert when it comes to security especially not in Sling but >> that is what I had to do in order >> to make the 46-line blog work and using WebDav to do that.... > > Ah, got it now, what didn't work for you is the WebDAV connection to > Sling, after setting "Allow Anonymous Access" to false. > > As a workaround, you can use curl to upload the tests scripts, see below. > > But there's a bug here, the OPTIONS request used by the WebDAV client > receives a login form instead of a 401 when "Allow Anonymous Access" > is false. I'll have a look. > > -Bertrand > > > How to upload the blog.esp script using curl: > curl -X MKCOL http://admin:ad...@localhost:8888/apps/blog > curl -T blog.esp http://admin:ad...@localhost:8888/apps/blog/blog.esp
