Re: Authentication with tomcat
From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: Wed, 22 Oct 2003 11:40:18 -0700
That indicates that you have "Integrated Authentication" turned on in the
vdir in IIS. Turn it all off except for Anonymous if you do NOT want IIS to
do any authentication handshakes.
-- //David IIS This posting is provided "AS IS" with no warranties, and confers no rights. // "Pascal Fluck" <firstname.lastname@example.org.SPAM> wrote in message news:email@example.com... Thanks for quickly answer. I try to change IIS config, but I alway have in header "Authorization" the value "Negotiate TlRMTVNTUAABAAAAB4IAXXXAAAAAAAAAA=". When I change password or username, this value don't change... I think that IIS is sending anonymous authentication? Strange... Thanks Pascal "David Wang [Msft]" <firstname.lastname@example.org> a écrit dans le message de news: OlmNWcFmDHA.1488@TK2MSFTNGP12.phx.gbl... > If you have authentication enabled on IIS and the client send Authorization > header, then IIS will negotiate authentication for you. Otherwise, IIS will > not. > > If you want the application to handle its own authentication, then make sure > IIS is only running Anonymous authentication (i.e. no authentication). This > would be a configuration issue since there is no way for IIS to know whether > an application running on it is trying to do some other custom > authentication. > > -- > //David > IIS > This posting is provided "AS IS" with no warranties, and confers no rights. > // > "Pascal Fluck" <email@example.com.SPAM> wrote in message > news:firstname.lastname@example.org... > Hello, > > I have a problem with IIS (I think): > > I'm doing a servlet that work under Tomcat 4.1. She ask for authentication > and check in a database for user and password. > > She work fine directly in Tomcat access (8080 port). > > But when I try to launch it trougth IIS (isapi_redirect.dll : IIS -> > ISAPII -> Tomcat), it doesn't work... > It's like if IIS make an own authentication... > > In fact I see that the http header variable "Authorization" is always void > when I call the servlet trougth IIS and is setted trougth Tomcat (8080). > > Anybody has idee? > > Thanks a lot... > > >