Re: Authenticate "on demand"

That looks right. I just hit a site using basic auth that we have and
here's the headers I got back:

HTTP/1.1 401 Authorization Required
Accept-Ranges: bytes
Content-Type: text/html; charset=ISO-8859-1
Connection: close
Date: Wed, 29 Mar 2006 14:08:20 GMT
WWW-Authenticate: Basic realm="Customer_Service"
Server: Apache/2.0.52 (iSeries)
Content-Length: 975

I don't know if order makes any difference or not.

Matt 

-----Original Message-----
From: web400-bounces+matt.haas=thomson.com@xxxxxxxxxxxx
[mailto:web400-bounces+matt.haas=thomson.com@xxxxxxxxxxxx] On Behalf Of
Bob Cozzi
Sent: Tuesday, March 28, 2006 10:00 PM
To: 'Web Enabling the AS400 / iSeries'
Subject: Re: [WEB400] Authenticate "on demand"

Matt,
Are you suggesting that I send something like the following:

Status 401 Unauthorized
WWW-Authenticate: Basic realm="cPanel"
Connection: close


-Bob


-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]
On
Behalf Of Matt.Haas@xxxxxxxxxxx
Sent: Tuesday, March 28, 2006 3:42 PM
To: web400@xxxxxxxxxxxx
Subject: Re: [WEB400] Authenticate "on demand"

Bob,

If you are using basic authentication, you'll need to send an
Authenticate HTTP header to get the browser to pop up the authentication
dialog.

Matt

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]
On Behalf Of cozzi@xxxxxxxxx
Sent: Tuesday, March 28, 2006 2:01 PM
To: Web Enabling the AS400 / iSeries
Subject: [WEB400] Authenticate "on demand"

   I need to have users log onto the 400 via a web page.
   Got that working fine... authentication does it.
    
   But if they sit there for more than 30 minutes, I need to have the
   authentication expire and when they go to another page, "force" them
to
   sign on again.
    
   I've tried several HTTP Headers, but nothing seems to force them to
   re-signon.
    
   Any ideas?
    
   -Bob Cozzi