https://bz.apache.org/bugzilla/show_bug.cgi?id=57836
--- Comment #4 from George Stanchev <stanc...@hotmail.com> --- The thing is that ISAPI doesn't return null. You pass a buffer ptr and it fills it. In the case of absent REMOTE_USER, ISAPI sets the buffer[0]=0 and &size=0. So essentially the caller cannot differentiate NULL from "". But they are essentially the same thing. Alternatively the fix can go in Tomcat itself to NOT create CoyotePrincipal upon "" OR null string read from AJP which is also correct. If this was my product and I was controlling it, I'd put a fix in both places. Given the difficulty in getting Tomcat Connector releases out, I would be happy to open a bug against Tomcat and get a fix there which will alleviate the issue. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org