DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25055>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25055

getRemoteUser() returns null - bypass of apache authentication





------- Additional Comments From [EMAIL PROTECTED]  2003-12-08 08:28 -------
Ben, I did this already. 
The issue is that that using a .htaccess file does not protect tomcat served
requests (*.jsp). It bypasses apache and does not ask for a login/password.

I see this in apache 2.047 + tomcat 4.1.29 (both windows and linux) whereas
apache 1.3.29 +  tomcat 4.1.24 worked fine
I do not know if this a tomcat or an apache issue. I'm going to write an email
to tomcat-user to see if anyone else experiences this problem.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to