Thank you. I make some progress, but still need some helps.
That is what I did: 1. replace the hashing algorithm from SHA to MD5. 2. remove the <realm-name> line from <login-config> The new <login-config> section of web.xml looks as follows: <login-config> <auth-method>DIGEST</auth-method> <digest>MD5</digest> </login-config> I generate a hashing message with digest.bat: digest -a md5 stan3:localhost:8079:stan3 I also replace the digest attribute of a Realm section in server.xml from "SHA" to "MD5" Having done all, it finally works! However, the authentication fails when I add a <realm-name> section in <login-config>. For example: <login-config> <auth-method>DIGEST</auth-method> <digest>MD5</digest> <realm-name>stanley_realm</realm-name> </login-config> I, hereafter, generate the hashing message with digest.bat: digest -a md5 stan4:stanley_realm:stan4 The digest authentication no longer works. Would you give me some help? Stanley --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org