Re: Apache and inprocess Tomcat security

Thanks Joel. I had considered that and had tried a config with that
block added and it still allowed me to run snoop.jsp without
authenticating. I tried both again and got the same results. I was able
to run snoop everytime I tried, except when I shutdown the server and
forgot to restart it before trying to run it:)

>>> jrc@xxxxxxxxxx 2/17/2005 10:42:19 AM >>>
On Thu, 2005-02-17 at 20:12, Mike Cunningham wrote:
> I am trying to setup an Apache server with an inprocess Tomcat server
to
> run jsps, and set it up so that a user must authenticate using an
> iSeries userid/profile in order to run the jsp. I have the server
> configured and it can run the snoop.jsp code but it does not ask for
a
> signon before running. If I try and access the index.html file I
must
> signon first.  Any ideas what I am doing wrong ?  


> with the index in htdocs and the jsp in webapps/example
> 
> <Directory /www/dan/htdocs>
>    Order Allow,Deny
>    Require valid-user
>    Allow From all
>    UserID %%CLIENT%%
>    PasswdFile %%SYSTEM%%
>    AuthType Basic
>    AuthName dan
> </Directory>

Since the jsp is not underneath the htdocs/ directory, the
authentication requirement would not apply.  You should add a block
like
the one above for /www/dan/webapps or /www/dan/webapps/example

Joel Cochran
http://www.rpgnext.com


-- 
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.