Lloyd,

On 13.12.2024 01:39, DIGLLOYD wrote:
ISSUE: users cannot login to my site.
CAUSE: Firefox and Chrome are sending SHA-256 DIGEST auth, which is MD5 (Safari 
uses MD5 which is working fine)

Details:
- Tomcat 9.0.98
- DIGEST auth using MD5
- has been working for 15+ years just fine.
What exactly did you do? Did you update Tomcat? From which version to which version? Does it still work with the old version?
Custom Realm in use purpose of managing auth info, but it otherwise defers to 
org.apache.catalina.realm.RealmBase.
CredentialHandler: eg <CredentialHandler 
className="org.apache.catalina.realm.MessageDigestCredentialHandler" algorithm="MD5"  
/>

By instrumenting this realm, I have determined the following:
Did you change your realm configuration at all during your update? If so, what did you change? Can you post the whole Realm (without password, of course)?

Sebastian

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to