I had a problem because I had both an apache Auth directive and the tomcat authentication on the manager app - I'd get the popup login from apache, then from tomcat, then apache again, then the page would hang.
Removing the Auth directive in apache enabled me to login using just my tomcat login. I guess your problem is more complicated than this though? I never did find any thing in any log files to see what was going on. Tamsin w: www.anorakgirl.co.uk -----Original Message----- From: Alan Chandler [mailto:[EMAIL PROTECTED] Sent: 14 January 2006 07:45 To: users@tomcat.apache.org Subject: How do you debug Authentication Problems I have tomcat4 fronted by apache2 and linked via mod_jk. I am running well with basic applications, but up until now I have been manually loading applications. I tried to use the manager application, and it is asking me to authenticate myself. I have added myself into the manager role in the tomcat-users, but I get into a loop of authentication failures. As a TEMPORARY measure, I have added the authentication into the Apache configuration (inside a <Location> directive and removed it from the web.xml of the manager application. And that works. There is nothing in any of my standardly configured logs to indicate what is happening. But, given this effect of getting it to work when I delegate security control to Apache, I suspect that the front ending of tomcat with apache is playing some effect on the failures. It also explains why I could never get my application with user login to work and had to give up trying to build authentication into a web app. But what is the problem? and how do I debug this to get a clear picture of what is happening? Surely others have had the same issues - front ending Tomcat with apache must be a relatively frequent configuration - and have overcome them. -- Alan Chandler http://www.chandlerfamily.org.uk Open Source. It's the difference between trust and antitrust. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]