I agree that that would work, but I'm not using any servlets to download the
files, and thus have no where to place the code. I've basically just set up
a folder, threw the word documents into it, and put a WEB-INF/web.xml (with
security) in it as well. I was using apache's .htaccess before, but needed
to move things to tomcat to use the single-signon.

Any other solutions out there?

Cheers,
Brad

----- Original Message ----- 
From: "Jon Wingfield" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>
Sent: Thursday, August 12, 2004 6:09 AM
Subject: Re: Tomcat 4.1.30 adding no-cache to http headers


> Yep. Tomcat (reasonably) adds these headers when the requested url is
> within a security constraint defined within the web.xml.
>
> In all places on our site where pdf, excel, word docs etc can be
> downloaded we have the following code:
>
>
>      final String userAgent = request.getHeader("user-agent");
>      if (response.containsHeader("Pragma")
>          && userAgent!=null
>          && userAgent.toUpperCase().indexOf("MSIE")>-1) {
>          response.setHeader("Pragma", "public");
>      }
>
> This seems to have solved the issue for us. You could put the above code
> in a Filter mapped to your download urls in the members context.
>
> HTH,
>
> Jon
>
>
> Brad Hafichuk wrote:
>
> > The problem I'm facing is that I have MSWord (*.doc) files in a webapp
that required basic auth to access. The problem I've come across is that
when downloading (viewing) the files in IE, word can't find the file (it's
not cached http://support.microsoft.com/?kbid=317208). I've checked out  the
headers using wget and it looks like tomcat is adding the Pragma and
Cache-Control headers (which causes the IE problem). Note that I'm running
apache infront of tomcat.
> >
> >
> > [EMAIL PROTECTED] PVIMS]# wget -S
"http://username:[EMAIL PROTECTED]/members/acclaim/PVIMS/S
ection 10.doc"
> > --15:49:58-- 
http://username:[EMAIL PROTECTED]/members/acclaim/PVIMS/Section%2010.doc
> >            => `Section 10.doc.5'
> > Resolving www.nationalengineering.ca... 142.59.91.190
> > Connecting to www.nationalengineering.ca[142.59.91.190]:80... connected.
> > HTTP request sent, awaiting response...
> >  1 HTTP/1.1 200 OK
> >  2 Date: Wed, 11 Aug 2004 21:44:17 GMT
> >  3 Server: Apache/2.0.50 (Fedora)
> >  4 Pragma: No-cache
> >  5 Cache-Control: no-cache
> >  6 Expires: Thu, 01 Jan 1970 00:00:00 GMT
> >  7 Set-Cookie: JSESSIONIDSSO=74C58A3FE66679CF322FE867EE6469CC; Path=/
> >  8 Set-Cookie: JSESSIONID=48B55A59C96C5DA1BDBE5CA6D781FF88;
Path=/members
> >  9 ETag: W/"41984-1092171072000"
> > 10 Last-Modified: Tue, 10 Aug 2004 20:51:12 GMT
> > 11 Content-Type: application/msword
> > 12 Content-Length: 41984
> > 13 Connection: close
> >
> >
> >
100%[=======================================================================
==========>] 41,984        --.--K/s
> >
> > 15:49:58 (1.37 MB/s) - `Section 10.doc.5' saved [41984/41984]
> >
> >
> >
> > Is there anyway I can remove these headers for the /members context. I'm
basically using tomcat in place of Apache's .htaccess files, since I need to
use tomcat's single-signon for other *real* applications.
> >
> > Thanks,
> > Brad
> >
> > Brad Hafichuk
> > Azus Technologies Inc.
> > www.azus.net
> > (403) 710-8079
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to