Digest authentication for Apache is at http://httpd.apache.org/docs/howto/auth.html#digest.
For a webDAV enabled and digest location (/davdigest), I have the following configuration in httpd.conf for Apache <Directory "dir-path"> Dav On Options None AllowOverride None AuthName "DAV Digest" AuthDigestDomain /davdigest AuthType Digest AuthDigestFile "digest-file-path" require valid-user </Directory> Restrictions ------------ 1. Only supports md5 algorithm. 2. Fixed client nonce and nonce count values. 3. Assumes credentials passed to Authenticator are values to be used for requested realm. Cheers, Rob. -----Original Message----- From: Dirk Verbeeck [mailto:[EMAIL PROTECTED]] Sent: 21 January 2002 22:07 To: Slide Developers List Subject: Re: FW: Digest authentication Very nice, I'll apply it shortly... Can you write a small howto or give me a link how to configure apache/tomcat to make use of this? Also, can you make a todo list and/or a restrictions list so that somebody can quickly see what is implemented and what is not? Thanks, Dirk Robert Owen wrote: > > -----Original Message----- > From: Robert Owen > Sent: 17 January 2002 15:33 > To: '[EMAIL PROTECTED]' > Subject: Digest authentication > > Here are the beginnings of a digest authentication implementation for > HttpClient. It's a start as the client only supports the md5 algorithm and > does not use a generated client nonce or nonceCount (these are static), but > it does work against an Apache web server with digest authentication.[Rob] > I hope this helps as we would like to see support for digest authentication. > > Cheers, > Rob. > > > ------------------------------------------------------------------------ > Name: httpclient_patch.txt > httpclient_patch.txt Type: Plain Text (text/plain) > Encoding: quoted-printable > > Name: authenticator_patch.txt > authenticator_patch.txt Type: Plain Text (text/plain) > Encoding: quoted-printable > > ------------------------------------------------------------------------ > -- > To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> > For additional commands, e-mail: <mailto:[EMAIL PROTECTED]> -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]> -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
