RE: WebSphere Express and Basic Authentication

> From: Brad Stone
> 
> Joe,
> 
> BA with Apache is actually quite simple.  It would look
> something like this:
> 
> Alias /secure  /myweb/wwwsecure
> <Directory /myweb/wwwsecure>
> ...
>    AuthName "Secure"
>    AuthType Basic
>    PasswdFile %%SYSTEM%%
>    UserID %%CLIENT%%
>    Require valid-user
> </Directory>

Yeah, but when you attach WebSphere, the whole ballgame changes.
WebSphere adds line two to your httpd.conf as the following:

WebSpherePluginConfig
/QIBM/UserData/WebASE/ASE5/MYAPP/config/cells/plugin-cfg.xml

The plugin-cgf.xml has a directive:

 <Uri AffinityCookie="JSESSIONID"
      AffinityURLIdentifier="jsessionid" Name="/myapp/*"/>

This seems to somehow override any attempts to secure /myapp.


Joe