WS 7.0 Authentication

I'm trying to get digest authentication working with WS 7.0 before we try using an LDAP directory.

A few days ago I created an ACL for the root directory that requires you to come from a specific IP range. This is working fine. You can access the web pages if you're coming from the IP range and denied access if not.

I now want to test digest authentication against a specific directory. I created a digest authentication database and created a test user/password.

Below is the acl file and the output seen in the logs when a browser tries to hit the specified directory.

Any thoughts on what might be missing? Is WS 7.0 trying to use the prompt "Please Login" as some kind of realm?

Thanks.

vserver.acl file

version 3.0;

acl"uri=/*";

authenticate (user,group){

database ="keyfile";

method ="basic";

prompt ="Server Authentication";

};

deny (all)

user ="anyone";

allow (all)

user ="anyone" and

ip ="xxx.xxx.*";

acl"uri=/somedir/*";

authenticate (user,group){

database ="SOMENAME_Digest";

method ="digest";

prompt ="Please Login";

};

deny (all)

user ="anyone";

allow (all)

user ="some_user";

log output

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/, process-uri-objects reports: processing objects for URI /somedir/

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/, process-uri-objects reports: adding object name="default"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/, func_exec reports: executing fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true" Directive="AuthTrans"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/, func_exec reports: fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true" Directive="AuthTrans" returned -2 (REQ_NOACTION)

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/, func_exec reports: executing fn="ntrans-j2ee" name="j2ee" Directive="NameTrans"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/, func_exec reports: fn="ntrans-j2ee" name="j2ee" Directive="NameTrans" returned -2 (REQ_NOACTION)

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/, func_exec reports: executing fn="pfx2dir" from="/mc-icons" dir="/usr/local/webserver7/lib/icons" name="es-internal" Directive="NameTrans"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/, func_exec reports: fn="pfx2dir" from="/mc-icons" dir="/usr/local/webserver7/lib/icons" name="es-internal" Directive="NameTrans" returned -2 (REQ_NOACTION)

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/, func_exec reports: executing fn="home-page" path="" Directive="NameTrans"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/, func_exec reports: fn="home-page" path="" Directive="NameTrans" returned -2 (REQ_NOACTION)

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/, func_exec reports: executing fn="check-acl" acl="default" Directive="PathCheck"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/, func_exec reports: fn="check-acl" acl="default" Directive="PathCheck" returned -2 (REQ_NOACTION)

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/, func_exec reports: executing fn="unix-uri-clean" Directive="PathCheck"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/, func_exec reports: fn="unix-uri-clean" Directive="PathCheck" returned 0 (REQ_PROCEED)

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/, func_exec reports: executing fn="find-pathinfo" Directive="PathCheck"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/, func_exec reports: fn="find-pathinfo" Directive="PathCheck" returned -2 (REQ_NOACTION)

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/, func_exec reports: executing fn="find-index-j2ee" Directive="PathCheck"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/, func_exec reports: fn="find-index-j2ee" Directive="PathCheck" returned -2 (REQ_NOACTION)

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/, func_exec reports: executing fn="find-index" index-names="index.html,index.htm,home.html,index.jsp,index.php" Directive="PathCheck"

[18/May/2007:15:13:58] fine (29543): for host xxx.xxx.x.xx trying to GET /somedir/, restarting request as /somedir/index.html

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: fn="find-index" index-names="index.html,index.htm,home.html,index.jsp,index.php" Directive="PathCheck" returned -4 (REQ_RESTART)

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, process-uri-objects reports: processing objects for URI /somedir/index.html

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, process-uri-objects reports: adding object name="default"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: executing fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true" Directive="AuthTrans"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true" Directive="AuthTrans" returned -2 (REQ_NOACTION)

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: executing fn="ntrans-j2ee" name="j2ee" Directive="NameTrans"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: fn="ntrans-j2ee" name="j2ee" Directive="NameTrans" returned -2 (REQ_NOACTION)

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: executing fn="pfx2dir" from="/mc-icons" dir="/usr/local/webserver7/lib/icons" name="es-internal" Directive="NameTrans"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: fn="pfx2dir" from="/mc-icons" dir="/usr/local/webserver7/lib/icons" name="es-internal" Directive="NameTrans" returned -2 (REQ_NOACTION)

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: executing fn="home-page" path="" Directive="NameTrans"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: fn="home-page" path="" Directive="NameTrans" returned -2 (REQ_NOACTION)

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: executing fn="unix-uri-clean" Directive="PathCheck"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: fn="unix-uri-clean" Directive="PathCheck" returned 0 (REQ_PROCEED)

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: executing fn="find-pathinfo" Directive="PathCheck"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: fn="find-pathinfo" Directive="PathCheck" returned -2 (REQ_NOACTION)

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: executing fn="find-index-j2ee" Directive="PathCheck"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: fn="find-index-j2ee" Directive="PathCheck" returned -2 (REQ_NOACTION)

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: executing fn="find-index" index-names="index.html,index.htm,home.html,index.jsp,index.php" Directive="PathCheck"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: executing fn="set-cache-control" control="public" Directive="PathCheck"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: fn="set-cache-control" control="public" Directive="PathCheck" returned 0 (REQ_PROCEED)

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: executing fn="find-links" disable="h" Directive="PathCheck"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: fn="find-links" disable="h" Directive="PathCheck" returned 0 (REQ_PROCEED)

[18/May/2007:15:13:58] fine (29543): acl user: match on user = (anyone)

[18/May/2007:15:13:58] fine (29543): acl ip: match on ip = (xxx.xxx.*)

[18/May/2007:15:13:58] fine (29543): acl user: match on user = (anyone)

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: executing fn="error-j2ee" Directive="Error"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: fn="error-j2ee" Directive="Error" returned -2 (REQ_NOACTION)

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: executing fn="flex-log" Directive="AddLog"

[18/May/2007:15:13:58] finest (29543): for host xxx.xxx.x.xx trying to GET /somedir/index.html while trying to GET /somedir/, func_exec reports: fn="flex-log" Directive="AddLog" returned 0 (REQ_PROCEED)