IIS is not serving your JSP files... only HTML files.
There probably is another server... a "container" for JSP and
servlets... do you know what you're using? Possible candidates are
Tomcat or Resin.
Check those and see if you can figure out the security aspects of
that... also... check out the web.xml file which resides in the
directory {webapp_directory}/WEB-INF/ and see what you find out...
hope this helps.
Regards, Stefan.
-----Original Message-----
From: A mailing list about Java Server Pages specification and reference
[mailto:[EMAIL PROTECTED]]On Behalf Of Debbie Casper
Sent: 31. okt�ber 2000 17:37
To: [EMAIL PROTECTED]
Subject: JSP security
Hi,
in our environment, we have NT running IIS as webserver with ServletExec
and
we have web appl written in JSP.
my understanding on network authentication is when you put a folder in
challenge/response mode, then everytime when browser trys to open a
document, it will ask you for uid/pwd/domain in a dialog box. (correct
me if
I am not right on this one).
now I don't want that authentication, even though I already uncheck that
challenge/response box, it still popping up the dialog box. is there
anything else that I am missing in IIS or something else that makes the
dialog box keep coming back?
is it possible that webserver protect files by file extensiion?
I did a small test after taking off the chanllenge/response box, the
html
did not show dialog box, however, the same file, if you rename it to a
JSP
extension, the dialog box will show up.
anyone has a insight on this one ?
Tks
________________________________________________________________________
_
Get Your Private, Free E-mail from MSN Hotmail at
http://www.hotmail.com.
Share information about yourself, create your own public profile at
http://profiles.msn.com.
========================================================================
===
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff
JSP-INTEREST".
Some relevant FAQs on JSP/Servlets can be found at:
http://java.sun.com/products/jsp/faq.html
http://www.esperanto.org.nz/jsp/jspfaq.html
http://www.jguru.com/jguru/faq/faqpage.jsp?name=JSP
http://www.jguru.com/jguru/faq/faqpage.jsp?name=Servlets
===========================================================================
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
Some relevant FAQs on JSP/Servlets can be found at:
http://java.sun.com/products/jsp/faq.html
http://www.esperanto.org.nz/jsp/jspfaq.html
http://www.jguru.com/jguru/faq/faqpage.jsp?name=JSP
http://www.jguru.com/jguru/faq/faqpage.jsp?name=Servlets
