I setup NES to protect the following subtree: /secure
So whenever anyone accesses a page under /secure, they are prompted for
authentication.

Problem: when the ACTION on one of my forms is /servlet/DoSomething,  inside
that servlet, request.getHeader("Authorization") returns null.  This seems
to be because the person was authenticated under /secure.  I believe this is
the case because when I set my whole site to be secured (i.e., protect
everything under /) then request.getHeader("Authorization") returns the
proper value.

So how do I secure a subtree but still get at the Authorization info from my
servlets?

Thanks,
Neil

___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

Reply via email to