iis basic authentication

2003-01-15 Thread Gustafson, Grant
I am not finding information on setting up iis basic authentication with
tomcat.  any help is appreciated!

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Re: iis basic authentication

2003-01-15 Thread Will Hartung
 From: Gustafson, Grant [EMAIL PROTECTED]
 Sent: Wednesday, January 15, 2003 8:33 AM
 Subject: iis basic authentication


 I am not finding information on setting up iis basic authentication with
 tomcat.  any help is appreciated!

Are you talking about simple IIS based authentication, or Tomcat based
authentication (using declarative security)?

This is a complete guess, but I would think that the IIS authentication
would be the same for any resource (whether it's a static resource served by
IIS or a dynamic one backed by Tomcat).

You'd like to think that the IIS Authentication mechanism would kick in
before Tomcat even has a chance to see the request, and that by the time
Tomcat DOES see it, then its, implicitly, already authenticated and all of
the authentication HTTP headers should be in the request passed to Tomcat.

I'm not an IIS expert (heck, I'm not even a novice or a user!), but that's
all based on how I perceive things SHOULD work.

Let us know what you find out!

Regards,

Will Hartung
([EMAIL PROTECTED])



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Re: iis basic authentication

2003-01-15 Thread Jason Pyeron
We have not had time to diagnose this problem, but it does exist. It may 
be a simple config error, or an error in isapi_redirector.
We hope it is not in IIS cause we cant fix this then, it would be upto 
micorsoft.

Our todo list includes this line:

 Check ISAPI for php, verify NTAUTH does not work on php files. If it does work ADD 
fix ISAPI for tomcat.

-jason pyeron

On Wed, 15 Jan 2003, Will Hartung wrote:

 From: Gustafson, Grant [EMAIL PROTECTED]
 Sent: Wednesday, January 15, 2003 8:33 AM
 Subject: iis basic authentication


 I am not finding information on setting up iis basic authentication with
 tomcat.  any help is appreciated!

You'd like to think that the IIS Authentication mechanism would kick in
before Tomcat even has a chance to see the request, and that by the time
Tomcat DOES see it, then its, implicitly, already authenticated and all of
the authentication HTTP headers should be in the request passed to Tomcat.


-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-   -
- Jason Pyeron   http://www.pyerotechnics.com   -
- Owner  Lead  Pyerotechnics Development, Inc. -
- +1 410 808 6646 (c)   500 West University Parkway #1S -
- +1 410 467 2266 (f)   Baltimore, Maryland  21210-3253 -
-   -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

This message is for the designated recipient only and may contain 
privileged, proprietary, or otherwise private information. If you
have received it in error, purge the message from your system and 
notify the sender immediately.  Any other use of the email by you 
is prohibited.




--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: iis basic authentication

2003-01-15 Thread Gustafson, Grant
thanks to those who have replied...the problem still exists.   I am talking
about IIS Authentication and not Tomcat Authentication.  Fortunately, this
is an intranet application...unfortunately, the iis basic authentication
does not function as intended for  pure iis applications. Tomcat simply
overrides the security.  
the security works if I access a *.jsp via the physical path, but iis does
not know what to do with the *.jsp and delivers it as text code.  the
security fails when I access the same application via the virtual.


-Original Message-
From: Jason Pyeron [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 15, 2003 1:58 PM
To: Tomcat Users List
Subject: Re: iis basic authentication


We have not had time to diagnose this problem, but it does exist. It may 
be a simple config error, or an error in isapi_redirector.
We hope it is not in IIS cause we cant fix this then, it would be upto 
micorsoft.

Our todo list includes this line:

 Check ISAPI for php, verify NTAUTH does not work on php files. If it does
work ADD fix ISAPI for tomcat.

-jason pyeron

On Wed, 15 Jan 2003, Will Hartung wrote:

 From: Gustafson, Grant [EMAIL PROTECTED]
 Sent: Wednesday, January 15, 2003 8:33 AM
 Subject: iis basic authentication


 I am not finding information on setting up iis basic authentication with
 tomcat.  any help is appreciated!

You'd like to think that the IIS Authentication mechanism would kick in
before Tomcat even has a chance to see the request, and that by the time
Tomcat DOES see it, then its, implicitly, already authenticated and all of
the authentication HTTP headers should be in the request passed to Tomcat.


-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-   -
- Jason Pyeron   http://www.pyerotechnics.com   -
- Owner  Lead  Pyerotechnics Development, Inc. -
- +1 410 808 6646 (c)   500 West University Parkway #1S -
- +1 410 467 2266 (f)   Baltimore, Maryland  21210-3253 -
-   -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

This message is for the designated recipient only and may contain 
privileged, proprietary, or otherwise private information. If you
have received it in error, purge the message from your system and 
notify the sender immediately.  Any other use of the email by you 
is prohibited.




--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]