DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://nagoya.apache.org/bugzilla/show_bug.cgi?id=6219>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=6219 FORM authentication does not work when using AJP connector to IIS (tested in 4.0.1 and 4.0.2b2) Summary: FORM authentication does not work when using AJP connector to IIS (tested in 4.0.1 and 4.0.2b2) Product: Tomcat 4 Version: 4.0.2 Beta 2 Platform: All OS/Version: Windows NT/2K Status: NEW Severity: Major Priority: Other Component: JK/AJP Connector AssignedTo: [EMAIL PROTECTED] ReportedBy: [EMAIL PROTECTED] FORM authentication does not work, because inside FormAuthenticator.authenticate, getUserPrincipal() never returns null - instead, it returns a Principal with empty user name - which is created in Ajp13Request.setAjpRequest, in this code: String remoteUser = ajp.remoteUser().toString(); if(remoteUser != null) setUserPrincipal(new Ajp13Principal(remoteUser)); remoteUser.toString() won't return NULL - it will return empty String (because in AJP packet, there actually was a field REMOTE_USER, but with length = 0) -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>