DO NOT REPLY [Bug 7897] New: - Realm problem...

[bugzilla]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=7897>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=7897

Realm problem...

           Summary: Realm problem...
           Product: Tomcat 4
           Version: 4.0.3 Final
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Major
          Priority: Other
         Component: Catalina
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


Excerpt from my web.xml file:

  <security-constraint>  
    <web-resource-collection>
      <web-resource-name>Accounting</web-resource-name>
      <url-pattern>/accounting/*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
       <role-name>accounting</role-name>
       <role-name>admin</role-name>
    </auth-constraint> 
  </security-constraint>

  <security-constraint>  
    <web-resource-collection>
      <web-resource-name>AP</web-resource-name>
      <url-pattern>/ap/*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
       <role-name>ap</role-name>
       <role-name>admin</role-name>
    </auth-constraint>
  </security-constraint>

  <login-config>
    <auth-method>BASIC</auth-method>
    <realm-name>Casey's Secure</realm-name>
  </login-config>   

Excerpt from my tomcat-users.xml file:

<tomcat-users>
  <user name="admin"  password="admin"  roles="admin" />
  <user name="accounting"  password="accounting"  roles="accounting" />
  <user name="ap"  password="ap" roles="ap" />
  <user name="bookkeeping" password="bookkeeping"  roles="bookkeeping" />
</tomcat-users>

Loggin in as "admin" gives access correctly to both directories.
Logging in as "accounting" gives access correctly to "accounting".
Logging in as "ap" gives access correctly to "ap".

Here's the problem.  If I log in as "accounting", and try to access "ap", 
catalina has a problem.  On netscape, the message I get is: "You have tried to 
download a file of type httpd/unix-directory.  Click 'More Info' to learn how 
to extend Navigator's capabilities."  If I save the file to my desktop and view 
it, it contains the standard blue and white Apache/Tomcat 4.0.3 error page.  If 
I try the same actions in IE, the error message is, "Internet Explorer cannot 
download /ap from..."

My guess is that Catalina is not returning the appropriate headers here.  Any 
thoughts?

Thanks,

Jim

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>