On 3/9/99 11:58 PM, Lame, John wrote:
>
<snip>
>
> "Server"="Microsoft-IIS/4.0"
> "Date"="Wed, 10 Mar 1999 00:07:08 GMT"
> "Connection"="keep-alive"
> "WWW-Authenticate"="NTLM"
> "Content-Type"="text/html"
> "Content-Length"="265"
> "WWW-Authenticate"="BASIC realm="xtLqRyz293""
> "Connection"="Keep-alive"
>
>Apparently IIS is prepending an additional request for authorization
>to the header (thanks a lot bill!). Now if the browser is anything
>other than Internet Explorer, this is not a problem since the "NTLM"
>(NT Lan Manager) Authorization Type is apparently ignored and a
>nice Base64 encoded "username:password" string is sent back.
>However, if the Browser is Internet Explorer, then it sends back
>something completely different. I have no idea how to decode the
>result (is that information available somewhere?) and I don't really
>want to, since, what I'd really like to do is prevent IIS from prepending
>its own WWW-Authenticate line in the first place. Is there any way
>to do this or am I going to be forced to abandon HTTP authentication
>entirely?
>
Turn on "Basic Authenitcation" and turn off "Windows NT
Challenge/Response" in the Authentication Method dialog for your server.
Appendix A of the ServletExec User Guide (p.A-7) explains how to do this
(I've give you the instructions here, but it's not that simple). You can
get a copy of the ServletExec User Guide from our web site:
http://www.newatlanta.com/downloads/index.html
----------------------------------------------------------------------
Vince Bonfanti [EMAIL PROTECTED]
New Atlanta Communications, LLC http://www.newatlanta.com/
----------------------------------------------------------------------
"Java Servlet Technology Leaders"
___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".
Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
