Re: how to tell Tomcat to send a blank "WWW-Authenticate" header?

2007-01-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mitch, Fisher, Mitchell L wrote: >> Christopher Schultz wrote: >>> When you want to log someone out of BASIC authentication, you >>> have to send a blank "WWW-Authenticate" header to the client, >>> just the same way that Tomcat would do if you weren'

Re: how to tell Tomcat to send a blank "WWW-Authenticate" header?

2007-01-21 Thread Martin Gainty
inal Message - From: "Fisher, Mitchell L" <[EMAIL PROTECTED]> To: "Tomcat Users List" Sent: Sunday, January 21, 2007 1:31 PM Subject: RE: how to tell Tomcat to send a blank "WWW-Authenticate" header? > Christopher Schultz wrote: >> Also, you c

RE: how to tell Tomcat to send a blank "WWW-Authenticate" header?

2007-01-21 Thread Fisher, Mitchell L
> Christopher Schultz wrote: >> Also, you could set the error page that is used when a user doesn't have >> the proper credentials to something that gives you the opportunity to >> re-login in order to access the forbidden resource. When you want to log >> someone out of BASIC authentication, you

Re: how to tell Tomcat to send a blank "WWW-Authenticate" header?

2007-01-17 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John, John Caron wrote: > Christopher Schultz wrote: >> Also, you could set the error page that is used when a user doesn't have >> the proper credentials to something that gives you the opportunity to >> re-login in order to access the forbidden reso