BTW I forgot to mention... Access Control has absolutely no interaction with
the servlet engine.  It is invoked BEFORE any request reaches the servlet
engine's request path analysis.

--
Gregg Orangio
New Atlanta Communications

>   -----Original Message-----
>   From: Gregg Orangio [mailto:[EMAIL PROTECTED]]
>   Sent: Tuesday, January 04, 2000 11:18 AM
>   To: Balasubramaniam, Krishnamoorthy (IndSys,IM)
>   Cc: [EMAIL PROTECTED]
>   Subject: RE: Access Control for Servlets
>
>
>   Kirshna,
>
>   Establishing the access control rules can be tricky.  Be sure
>   that you have them listed in order (top to bottom) from "most
>   general" to "most specific" with the first rule denying all
>   access.  Also be sure that you have selected the "Continue
>   (testing rules if match found)" option, according to your
>   desires.  Also, unless you have configured a "deny response"
>   file or URL, denied requests will result in a "HTTP 404 - File
>   not found" response.  Finally, as you test access to the
>   server, be aware that the browser will remember the username
>   and password used on a "per request" basis and there is no way
>   to change it except to restart the browser.  At least this is
>   what I have found using both Navigator and Explorer.
>
>   Thanks for using ServletExec.
>
>   --
>   Gregg Orangio
>   New Atlanta Communications
>   [EMAIL PROTECTED]
>
>
>
>   >   -----Original Message-----
>   >   From: Balasubramaniam, Krishnamoorthy (IndSys,IM)
>   >   [mailto:[EMAIL PROTECTED]]
>   >   Sent: Monday, January 03, 2000 6:22 PM
>   >   Subject: Access Control for Servlets
>   >
>   >
>   >   Hi,
>   >     I want Access control for my /servlet directory using
>   NES3.6. I could
>   >   restrict access to ordinary HTML docs. But when I try to
>   control access
>   >   /servlet directory, it does not work. I would greatly
>   >   appreciate your help.
>   >
>   >   I am working with following environment.
>   >
>   >   Solaris OS
>   >   NES 3.6
>   >   ServeltExec2.2
>   >
>   >   --------------------------------------------------
>   >
>   >     I will explain what I have done so far. I tried to control
>   >   access using
>   >   3rd method(in the Restrict Access page of NES Admin) ie
>   URI. I typed in
>   >   uri=/servlet in the "Type in ACL name" edit box and set the
>   >   normal access
>   >   control. But it does not work.
>   >
>   >   thanks
>   >   Krishna
>   >

___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

Reply via email to