Hi !

I have a problem with Apache and Tomcat. I am using mod_webapp to
connect
my webapp "app" to the root of my apache "/". My application has a
structure
like 
    /app/public
    /app/secure
    /app/WEB-INF

Now I want apache to restrict all requests to http://server/app/secure/
to
some valid users using apache basic authentication with a htpasswd-file.
So I set up something like this :

  <VirtualHost....>

    <Location /app/secure>
      AuthType Basic
      AuthName "Secure Area"
      AuthUserFile /usr/local/apache/conf/secure.passwd
      Require valid-user
    </Location>

    WarpConnection con localhost:8008
    WepAppDeploy app con /
  </VirtualHost>

When accessing http://server/app/secure/ I am not asked for passwords.
Does
apache handle /.* first by asking mod_webapp and thus ignoring the
Location-
Directive ?

Any ideas how to make my secure-area secure ?

-- 
-Christian






--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to