Thanks for the quick response Mark. I think we have what your discussing on the perl side (see example below). If the resource is a java resource, what should be supplied for the SetHandler or can that be left blank?
<Location /resource> SetHandler perl-script PerlResponseHandler Proofpoint::Apiservice::REST Options +ExecCGI PerlSendHeader On Satisfy all allow from all Options None AuthName "service name" AuthType Basic AuthUserFile /xyz/file.users require valid-user </Location> Mark Thomas wrote: > > On 08/01/2010 16:51, cgswtsu78 wrote: >> >> Hello, >> >> I'm using mod_jk to forward all apache requests to /reportsvcs_ws/* to >> tomcat and I have a question regarding basic auth. I need to ensure the >> user has been authorized prior to the /reportsvcs_ws/* request and I'm >> unsure as the best angle to take. Is there anything that can be >> configured >> on the apache side prior to the mod_jk forwarding to tomcat to ensure the >> user is authorized? > > Yes. Configure BASIC auth in httpd for the resources you want to protect > and httpd will take care of that for you. > > mod_jk will also pass the authenticated user identity to Tomcat if you > need it in your app. > > Mark > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > > > -- View this message in context: http://old.nabble.com/How-to-Configure-Basic-Auth-When-Using-mod_jk-tp27078996p27080303.html Sent from the Tomcat - User mailing list archive at Nabble.com. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org