I'm trying to force Authentication when a user calls a servlet in the
same way Apache forces Authentication for directories protected by an
.htaccess file.

I tried using

<Location /servlets/mysevlet>
  order deny,allow 
  deny from all 
  allow from someIP_or_domain.com
</Location>

Can I set the "allow from ..." line to use a security realm rather than
a domain or IP?

Incidently, when I set allow to fixed IP address that did not restrict
the servlet from other IP address. Can anyone shed light on this
problem?

--Mark Ashworth


----------------------------------------------------------------
To subscribe:        [EMAIL PROTECTED]
To unsubscribe:      [EMAIL PROTECTED]
Archives and Other:  <http://www.working-dogs.com/>
Problems?:           [EMAIL PROTECTED]

Reply via email to