Archiva misleadingly logs an authorization error when deploying during the 
initial challenge stage
--------------------------------------------------------------------------------------------------

                 Key: MRM-1114
                 URL: http://jira.codehaus.org/browse/MRM-1114
             Project: Archiva
          Issue Type: Bug
          Components: Users/Security, WebDAV interface
    Affects Versions: 1.2-M1
            Reporter: Brett Porter


In ArchivaServletAuthenticator:

{code}
log.info( "Authorization Denied [ip=" + request.getRemoteAddr() + 
",isWriteRequest=" + isWriteRequest +
  ",permission=" + permission + ",repo=" + repositoryId + "] : " +
  authzResult.getException().getMessage() );
{code}

However, when deploying the client will send a request with no credentials 
first before receiving the challenge, and this is logged in the middle, which 
causes some confusion.

It should be removed altogether and possibly logged (maybe in a different audit 
location), but at a later stage where it is finally rejected.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to