Hi all,

Any help on this one will be greatly appreciated.

We're running a Tomcat 3.3 installation alongside/via IIS4 on NT with a view
to migrating from asp to jsp in the near future.
Our current issue is that we're attempting to access the  'Authorization'
header in a JSP via IIS

Here's as far as I got:
- JSP page checks for the 'Authorization' header.
- if it exists, and is of type 'Basic' authentication, extract the base64
encoded username - DONE!!!
- if it does not exist, or is not 'Basic', throw back a WWW-Authenticate
BASIC / 401 response

This results in IIS throwing back the basic authenticate request & IE doing
a 'Basic logon' dialog box, for which I can enter my LAN logon. So far so
good.
The problem is that when the request headers are presented back to the JSP
page, the 'Authorization' field is set back to NTLM, not Basic.

Any suggestions on why this is happening and how we might work around it?

Thanks again.

Tref Gare
Web Developer MCSD
eCommerce Group
Phone:  (03) 9221 4106
Mobile: 0409 556 478
Fax:    (03) 9941 4295

===========================================================================
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
For digest: mailto [EMAIL PROTECTED] with body: "set JSP-INTEREST DIGEST".
Some relevant FAQs on JSP/Servlets can be found at:

 http://archives.java.sun.com/jsp-interest.html
 http://java.sun.com/products/jsp/faq.html
 http://www.esperanto.org.nz/jsp/jspfaq.jsp
 http://www.jguru.com/faq/index.jsp
 http://www.jspinsider.com

Reply via email to