I agree that that would work, but I'm not using any servlets to download the files, and thus have no where to place the code. I've basically just set up a folder, threw the word documents into it, and put a WEB-INF/web.xml (with security) in it as well. I was using apache's .htaccess before, but needed to move things to tomcat to use the single-signon.
Any other solutions out there? Cheers, Brad ----- Original Message ----- From: "Jon Wingfield" <[EMAIL PROTECTED]> To: "Tomcat Users List" <[EMAIL PROTECTED]> Sent: Thursday, August 12, 2004 6:09 AM Subject: Re: Tomcat 4.1.30 adding no-cache to http headers > Yep. Tomcat (reasonably) adds these headers when the requested url is > within a security constraint defined within the web.xml. > > In all places on our site where pdf, excel, word docs etc can be > downloaded we have the following code: > > > final String userAgent = request.getHeader("user-agent"); > if (response.containsHeader("Pragma") > && userAgent!=null > && userAgent.toUpperCase().indexOf("MSIE")>-1) { > response.setHeader("Pragma", "public"); > } > > This seems to have solved the issue for us. You could put the above code > in a Filter mapped to your download urls in the members context. > > HTH, > > Jon > > > Brad Hafichuk wrote: > > > The problem I'm facing is that I have MSWord (*.doc) files in a webapp that required basic auth to access. The problem I've come across is that when downloading (viewing) the files in IE, word can't find the file (it's not cached http://support.microsoft.com/?kbid=317208). I've checked out the headers using wget and it looks like tomcat is adding the Pragma and Cache-Control headers (which causes the IE problem). Note that I'm running apache infront of tomcat. > > > > > > [EMAIL PROTECTED] PVIMS]# wget -S "http://username:[EMAIL PROTECTED]/members/acclaim/PVIMS/S ection 10.doc" > > --15:49:58-- http://username:[EMAIL PROTECTED]/members/acclaim/PVIMS/Section%2010.doc > > => `Section 10.doc.5' > > Resolving www.nationalengineering.ca... 142.59.91.190 > > Connecting to www.nationalengineering.ca[142.59.91.190]:80... connected. > > HTTP request sent, awaiting response... > > 1 HTTP/1.1 200 OK > > 2 Date: Wed, 11 Aug 2004 21:44:17 GMT > > 3 Server: Apache/2.0.50 (Fedora) > > 4 Pragma: No-cache > > 5 Cache-Control: no-cache > > 6 Expires: Thu, 01 Jan 1970 00:00:00 GMT > > 7 Set-Cookie: JSESSIONIDSSO=74C58A3FE66679CF322FE867EE6469CC; Path=/ > > 8 Set-Cookie: JSESSIONID=48B55A59C96C5DA1BDBE5CA6D781FF88; Path=/members > > 9 ETag: W/"41984-1092171072000" > > 10 Last-Modified: Tue, 10 Aug 2004 20:51:12 GMT > > 11 Content-Type: application/msword > > 12 Content-Length: 41984 > > 13 Connection: close > > > > > > 100%[======================================================================= ==========>] 41,984 --.--K/s > > > > 15:49:58 (1.37 MB/s) - `Section 10.doc.5' saved [41984/41984] > > > > > > > > Is there anyway I can remove these headers for the /members context. I'm basically using tomcat in place of Apache's .htaccess files, since I need to use tomcat's single-signon for other *real* applications. > > > > Thanks, > > Brad > > > > Brad Hafichuk > > Azus Technologies Inc. > > www.azus.net > > (403) 710-8079 > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]