DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=6641>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=6641

Download of MS Office docs from protected areas fail with IE





------- Additional Comments From [EMAIL PROTECTED]  2002-02-27 10:03 -------
I can't download pdf,doc,xls ... file with IE through an HTTPS+BasicAuth 
connexion. 
IE----SSL+Basic Auth------>Apache+mod_jk------------ajp13-------->tomcat4.0.2

I got an error as described in http://support.microsoft.com/default.aspx?
scid=kb;EN-US;q196505. 

This is due to HTTP cache control headers returned by tomcat. When a page is 
downloaded with an authentication, the HTTP server set cache control headers 
(Pragma, Cache-Control, Expires) to avoid proxies to cache the page.In such 
case, this gives something like that :

HTTP/1.1 200 OK
Content-Type: application/pdf
Content-Length: 111219
Date: Tue, 26 Feb 2002 16:20:32 GMT
Pragma: No-cache
Server: Apache Tomcat/4.0.2 (HTTP/1.1 Connector)
Cache-Control: no-cache
Last-Modified: Tue, 26 Feb 2002 16:13:27 GMT
ETag: "111219-1014740007000"
Expires: Thu, 01 Jan 1970 00:00:00 GMT

When the page is downloaded through an HTTPS connexions, those cache control 
headers are not more needed because the document is encrypted ! Through the 
mod_jk connector (even with JkExtractSSL directive), tomcat always set cache 
control headers when Authentication is done. 

I have done some tests with Apache. Cache control headers are not set when 
using SSL and Authentication and I have no problem with IE to 
download .pdf, .doc etc ...
So, there might be something to correct in the Ajp13 connector...

Bye,

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to