You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by "Andreas Amstutz (JIRA)" <ji...@apache.org> on 2009/10/05 01:51:56 UTC

[jira] Created: (SLING-1134) GET for http://localhost:8080/ results in HTTP ERROR 200

GET for http://localhost:8080/ results in HTTP ERROR 200
--------------------------------------------------------

                 Key: SLING-1134
                 URL: https://issues.apache.org/jira/browse/SLING-1134
             Project: Sling
          Issue Type: Bug
          Components: Launchpad
    Affects Versions: Launchpad App 6
         Environment: Mac OS X 10.6.1, java version "1.6.0_15"
Firefox (3.5.3)
            Reporter: Andreas Amstutz


A GET for http://localhost:8080/ results in HTTP ERROR 200

Steps to reproduce this:
1) svn checkout http://svn.apache.org/repos/asf/sling/trunk Sling
2) mvn -s /dev/null install                 (I had to apply the attached sling.diff for this to be successful)
3) cd launchpad/app/
4) java -jar target/org.apache.sling.launchpad.app-6-SNAPSHOT.jar -c sling
5) http://localhost:8080/system/console
6) set "Allow Anonymous Access" to false (org.apache.sling.engine.impl.auth.SlingAuthenticator) 
7) go to http://localhost:8080/
Result:
- The log says: org.apache.sling.engine.impl.auth.SlingAuthenticator getAnonymousSession: Anonymous access not allowed by configuration - redirecting to login
- Firefox: HTTP ERROR 200 , Problem accessing /. Reason: OK

There is also quite a lot of noise in the error.log:
*WARN* [SCR Component Actor] org.apache.sling.jcr.jackrabbit.server.impl.security.PluggableDefaultAccessManager No pluggable AccessManager available, falling back to DefaultAccessManager

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (SLING-1134) GET for http://localhost:8080/ results in HTTP ERROR 200

Posted by "Peter Chiochetti (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/SLING-1134?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12786885#action_12786885 ] 

Peter Chiochetti commented on SLING-1134:
-----------------------------------------

I am happy with browser baed HTTP Auth and did not bother to test form based login, as I do not have any cosmetic problems with the browser popup and I can live without knowing the users password on the client side of my application. (Actually I consider this a feature.). So I immediately unchecked the "LoginForm" in "Apache Sling Authorization Header Authenticator" configuration. It also works well in safari and midori (another webkit based browser). If wrong credentials are given, they are asked for again and again. When the request gets cancelled, the message "HTTP ERROR 401 UNAUTHORIZED" is sent, how it is supposed to be. A page reload will then retrigger authentication. Here, accessing the system console always worked like that and still does, because it is a different "realm".

As webkit browsers only send credentials for resources beneath the directory where authentication was requested first, it may well be, that the login form hides in the favicon or some other resource, thats included in the page and stems from somewhere else on the server host. The browser based approach should display fine even then.

> GET for http://localhost:8080/ results in HTTP ERROR 200
> --------------------------------------------------------
>
>                 Key: SLING-1134
>                 URL: https://issues.apache.org/jira/browse/SLING-1134
>             Project: Sling
>          Issue Type: Bug
>          Components: Extensions
>    Affects Versions: Extensions httpauth 2.0.4
>         Environment: Mac OS X 10.6.1, java version "1.6.0_15"
> Firefox (3.5.3)
>            Reporter: Andreas Amstutz
>            Assignee: Felix Meschberger
>             Fix For: Extensions httpauth 2.0.6
>
>         Attachments: error.log, sling.diff
>
>
> A GET for http://localhost:8080/ results in HTTP ERROR 200
> Steps to reproduce this:
> 1) svn checkout http://svn.apache.org/repos/asf/sling/trunk Sling
> 2) mvn -s /dev/null install                 (I had to apply the attached sling.diff for this to be successful)
> 3) cd launchpad/app/
> 4) java -jar target/org.apache.sling.launchpad.app-6-SNAPSHOT.jar -c sling
> 5) http://localhost:8080/system/console
> 6) set "Allow Anonymous Access" to false (org.apache.sling.engine.impl.auth.SlingAuthenticator) 
> 7) go to http://localhost:8080/
> Result:
> - The log says: org.apache.sling.engine.impl.auth.SlingAuthenticator getAnonymousSession: Anonymous access not allowed by configuration - redirecting to login
> - Firefox: HTTP ERROR 200 , Problem accessing /. Reason: OK
> There is also quite a lot of noise in the error.log:
> *WARN* [SCR Component Actor] org.apache.sling.jcr.jackrabbit.server.impl.security.PluggableDefaultAccessManager No pluggable AccessManager available, falling back to DefaultAccessManager

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (SLING-1134) GET for http://localhost:8080/ results in HTTP ERROR 200

Posted by "Andreas Amstutz (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/SLING-1134?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andreas Amstutz updated SLING-1134:
-----------------------------------

    Attachment: error.log
                sling.diff

My local changes and logs produced for the steps described.

> GET for http://localhost:8080/ results in HTTP ERROR 200
> --------------------------------------------------------
>
>                 Key: SLING-1134
>                 URL: https://issues.apache.org/jira/browse/SLING-1134
>             Project: Sling
>          Issue Type: Bug
>          Components: Launchpad
>    Affects Versions: Launchpad App 6
>         Environment: Mac OS X 10.6.1, java version "1.6.0_15"
> Firefox (3.5.3)
>            Reporter: Andreas Amstutz
>         Attachments: error.log, sling.diff
>
>
> A GET for http://localhost:8080/ results in HTTP ERROR 200
> Steps to reproduce this:
> 1) svn checkout http://svn.apache.org/repos/asf/sling/trunk Sling
> 2) mvn -s /dev/null install                 (I had to apply the attached sling.diff for this to be successful)
> 3) cd launchpad/app/
> 4) java -jar target/org.apache.sling.launchpad.app-6-SNAPSHOT.jar -c sling
> 5) http://localhost:8080/system/console
> 6) set "Allow Anonymous Access" to false (org.apache.sling.engine.impl.auth.SlingAuthenticator) 
> 7) go to http://localhost:8080/
> Result:
> - The log says: org.apache.sling.engine.impl.auth.SlingAuthenticator getAnonymousSession: Anonymous access not allowed by configuration - redirecting to login
> - Firefox: HTTP ERROR 200 , Problem accessing /. Reason: OK
> There is also quite a lot of noise in the error.log:
> *WARN* [SCR Component Actor] org.apache.sling.jcr.jackrabbit.server.impl.security.PluggableDefaultAccessManager No pluggable AccessManager available, falling back to DefaultAccessManager

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Assigned: (SLING-1134) GET for http://localhost:8080/ results in HTTP ERROR 200

Posted by "Felix Meschberger (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/SLING-1134?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Felix Meschberger reassigned SLING-1134:
----------------------------------------

    Assignee: Felix Meschberger

> GET for http://localhost:8080/ results in HTTP ERROR 200
> --------------------------------------------------------
>
>                 Key: SLING-1134
>                 URL: https://issues.apache.org/jira/browse/SLING-1134
>             Project: Sling
>          Issue Type: Bug
>          Components: Extensions
>    Affects Versions: Extensions httpauth 2.0.4
>         Environment: Mac OS X 10.6.1, java version "1.6.0_15"
> Firefox (3.5.3)
>            Reporter: Andreas Amstutz
>            Assignee: Felix Meschberger
>             Fix For: Extensions httpauth 2.0.6
>
>         Attachments: error.log, sling.diff
>
>
> A GET for http://localhost:8080/ results in HTTP ERROR 200
> Steps to reproduce this:
> 1) svn checkout http://svn.apache.org/repos/asf/sling/trunk Sling
> 2) mvn -s /dev/null install                 (I had to apply the attached sling.diff for this to be successful)
> 3) cd launchpad/app/
> 4) java -jar target/org.apache.sling.launchpad.app-6-SNAPSHOT.jar -c sling
> 5) http://localhost:8080/system/console
> 6) set "Allow Anonymous Access" to false (org.apache.sling.engine.impl.auth.SlingAuthenticator) 
> 7) go to http://localhost:8080/
> Result:
> - The log says: org.apache.sling.engine.impl.auth.SlingAuthenticator getAnonymousSession: Anonymous access not allowed by configuration - redirecting to login
> - Firefox: HTTP ERROR 200 , Problem accessing /. Reason: OK
> There is also quite a lot of noise in the error.log:
> *WARN* [SCR Component Actor] org.apache.sling.jcr.jackrabbit.server.impl.security.PluggableDefaultAccessManager No pluggable AccessManager available, falling back to DefaultAccessManager

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (SLING-1134) GET for http://localhost:8080/ results in HTTP ERROR 200

Posted by "Peter Chiochetti (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/SLING-1134?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12786609#action_12786609 ] 

Peter Chiochetti commented on SLING-1134:
-----------------------------------------

Thank you.

Sling now also works fine with the browser based authentication mechanism, when the login form is suppressed.

Plus, there is no need anymore to append "?sling:authRequestLogin=1" to the request  to trigger authentication.

Yet, now I can only login as admin. Other users attempts will fail, I may open a separate issue for that with the details.

> GET for http://localhost:8080/ results in HTTP ERROR 200
> --------------------------------------------------------
>
>                 Key: SLING-1134
>                 URL: https://issues.apache.org/jira/browse/SLING-1134
>             Project: Sling
>          Issue Type: Bug
>          Components: Extensions
>    Affects Versions: Extensions httpauth 2.0.4
>         Environment: Mac OS X 10.6.1, java version "1.6.0_15"
> Firefox (3.5.3)
>            Reporter: Andreas Amstutz
>            Assignee: Felix Meschberger
>             Fix For: Extensions httpauth 2.0.6
>
>         Attachments: error.log, sling.diff
>
>
> A GET for http://localhost:8080/ results in HTTP ERROR 200
> Steps to reproduce this:
> 1) svn checkout http://svn.apache.org/repos/asf/sling/trunk Sling
> 2) mvn -s /dev/null install                 (I had to apply the attached sling.diff for this to be successful)
> 3) cd launchpad/app/
> 4) java -jar target/org.apache.sling.launchpad.app-6-SNAPSHOT.jar -c sling
> 5) http://localhost:8080/system/console
> 6) set "Allow Anonymous Access" to false (org.apache.sling.engine.impl.auth.SlingAuthenticator) 
> 7) go to http://localhost:8080/
> Result:
> - The log says: org.apache.sling.engine.impl.auth.SlingAuthenticator getAnonymousSession: Anonymous access not allowed by configuration - redirecting to login
> - Firefox: HTTP ERROR 200 , Problem accessing /. Reason: OK
> There is also quite a lot of noise in the error.log:
> *WARN* [SCR Component Actor] org.apache.sling.jcr.jackrabbit.server.impl.security.PluggableDefaultAccessManager No pluggable AccessManager available, falling back to DefaultAccessManager

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (SLING-1134) GET for http://localhost:8080/ results in HTTP ERROR 200

Posted by "Felix Meschberger (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/SLING-1134?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Felix Meschberger updated SLING-1134:
-------------------------------------

          Component/s:     (was: Launchpad)
                       Extensions
    Affects Version/s:     (was: Launchpad App 6)
                       Extensions httpauth 2.0.4
        Fix Version/s: Extensions httpauth 2.0.6

> GET for http://localhost:8080/ results in HTTP ERROR 200
> --------------------------------------------------------
>
>                 Key: SLING-1134
>                 URL: https://issues.apache.org/jira/browse/SLING-1134
>             Project: Sling
>          Issue Type: Bug
>          Components: Extensions
>    Affects Versions: Extensions httpauth 2.0.4
>         Environment: Mac OS X 10.6.1, java version "1.6.0_15"
> Firefox (3.5.3)
>            Reporter: Andreas Amstutz
>            Assignee: Felix Meschberger
>             Fix For: Extensions httpauth 2.0.6
>
>         Attachments: error.log, sling.diff
>
>
> A GET for http://localhost:8080/ results in HTTP ERROR 200
> Steps to reproduce this:
> 1) svn checkout http://svn.apache.org/repos/asf/sling/trunk Sling
> 2) mvn -s /dev/null install                 (I had to apply the attached sling.diff for this to be successful)
> 3) cd launchpad/app/
> 4) java -jar target/org.apache.sling.launchpad.app-6-SNAPSHOT.jar -c sling
> 5) http://localhost:8080/system/console
> 6) set "Allow Anonymous Access" to false (org.apache.sling.engine.impl.auth.SlingAuthenticator) 
> 7) go to http://localhost:8080/
> Result:
> - The log says: org.apache.sling.engine.impl.auth.SlingAuthenticator getAnonymousSession: Anonymous access not allowed by configuration - redirecting to login
> - Firefox: HTTP ERROR 200 , Problem accessing /. Reason: OK
> There is also quite a lot of noise in the error.log:
> *WARN* [SCR Component Actor] org.apache.sling.jcr.jackrabbit.server.impl.security.PluggableDefaultAccessManager No pluggable AccessManager available, falling back to DefaultAccessManager

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (SLING-1134) GET for http://localhost:8080/ results in HTTP ERROR 200

Posted by "Peter Chiochetti (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/SLING-1134?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12762175#action_12762175 ] 

Peter Chiochetti commented on SLING-1134:
-----------------------------------------

A wish: please make sling behave in that case like specified in this document: http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4 - i.e. send a 401 Unauthorized.

As browsers cache the credentials, a result code of 200 will not trigger a new authentication, which is especially useful, if eg. a user mistyped name or password - she then should get a chance to correct the error. Doing XHR requests instead is a little fragile too.



> GET for http://localhost:8080/ results in HTTP ERROR 200
> --------------------------------------------------------
>
>                 Key: SLING-1134
>                 URL: https://issues.apache.org/jira/browse/SLING-1134
>             Project: Sling
>          Issue Type: Bug
>          Components: Launchpad
>    Affects Versions: Launchpad App 6
>         Environment: Mac OS X 10.6.1, java version "1.6.0_15"
> Firefox (3.5.3)
>            Reporter: Andreas Amstutz
>         Attachments: error.log, sling.diff
>
>
> A GET for http://localhost:8080/ results in HTTP ERROR 200
> Steps to reproduce this:
> 1) svn checkout http://svn.apache.org/repos/asf/sling/trunk Sling
> 2) mvn -s /dev/null install                 (I had to apply the attached sling.diff for this to be successful)
> 3) cd launchpad/app/
> 4) java -jar target/org.apache.sling.launchpad.app-6-SNAPSHOT.jar -c sling
> 5) http://localhost:8080/system/console
> 6) set "Allow Anonymous Access" to false (org.apache.sling.engine.impl.auth.SlingAuthenticator) 
> 7) go to http://localhost:8080/
> Result:
> - The log says: org.apache.sling.engine.impl.auth.SlingAuthenticator getAnonymousSession: Anonymous access not allowed by configuration - redirecting to login
> - Firefox: HTTP ERROR 200 , Problem accessing /. Reason: OK
> There is also quite a lot of noise in the error.log:
> *WARN* [SCR Component Actor] org.apache.sling.jcr.jackrabbit.server.impl.security.PluggableDefaultAccessManager No pluggable AccessManager available, falling back to DefaultAccessManager

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Resolved: (SLING-1134) GET for http://localhost:8080/ results in HTTP ERROR 200

Posted by "Felix Meschberger (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/SLING-1134?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Felix Meschberger resolved SLING-1134.
--------------------------------------

    Resolution: Fixed

Fixed in Rev. 886980 ensuring the form is sent.

> GET for http://localhost:8080/ results in HTTP ERROR 200
> --------------------------------------------------------
>
>                 Key: SLING-1134
>                 URL: https://issues.apache.org/jira/browse/SLING-1134
>             Project: Sling
>          Issue Type: Bug
>          Components: Extensions
>    Affects Versions: Extensions httpauth 2.0.4
>         Environment: Mac OS X 10.6.1, java version "1.6.0_15"
> Firefox (3.5.3)
>            Reporter: Andreas Amstutz
>            Assignee: Felix Meschberger
>             Fix For: Extensions httpauth 2.0.6
>
>         Attachments: error.log, sling.diff
>
>
> A GET for http://localhost:8080/ results in HTTP ERROR 200
> Steps to reproduce this:
> 1) svn checkout http://svn.apache.org/repos/asf/sling/trunk Sling
> 2) mvn -s /dev/null install                 (I had to apply the attached sling.diff for this to be successful)
> 3) cd launchpad/app/
> 4) java -jar target/org.apache.sling.launchpad.app-6-SNAPSHOT.jar -c sling
> 5) http://localhost:8080/system/console
> 6) set "Allow Anonymous Access" to false (org.apache.sling.engine.impl.auth.SlingAuthenticator) 
> 7) go to http://localhost:8080/
> Result:
> - The log says: org.apache.sling.engine.impl.auth.SlingAuthenticator getAnonymousSession: Anonymous access not allowed by configuration - redirecting to login
> - Firefox: HTTP ERROR 200 , Problem accessing /. Reason: OK
> There is also quite a lot of noise in the error.log:
> *WARN* [SCR Component Actor] org.apache.sling.jcr.jackrabbit.server.impl.security.PluggableDefaultAccessManager No pluggable AccessManager available, falling back to DefaultAccessManager

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (SLING-1134) GET for http://localhost:8080/ results in HTTP ERROR 200

Posted by "Felix Meschberger (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/SLING-1134?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12785609#action_12785609 ] 

Felix Meschberger commented on SLING-1134:
------------------------------------------

@Andreas: I think I found the problem: the form has been sent in the response but somehow the response was reset and thus the form not sent.... I will add a flushBuffer() call to ensure the form is sent.

@Peter: I have finally added functionality to disable form based login and use regular HTTP login with the browser's login box (based on 401/UNAUTHORIZED response). See SLING-1222.

> GET for http://localhost:8080/ results in HTTP ERROR 200
> --------------------------------------------------------
>
>                 Key: SLING-1134
>                 URL: https://issues.apache.org/jira/browse/SLING-1134
>             Project: Sling
>          Issue Type: Bug
>          Components: Extensions
>    Affects Versions: Extensions httpauth 2.0.4
>         Environment: Mac OS X 10.6.1, java version "1.6.0_15"
> Firefox (3.5.3)
>            Reporter: Andreas Amstutz
>            Assignee: Felix Meschberger
>             Fix For: Extensions httpauth 2.0.6
>
>         Attachments: error.log, sling.diff
>
>
> A GET for http://localhost:8080/ results in HTTP ERROR 200
> Steps to reproduce this:
> 1) svn checkout http://svn.apache.org/repos/asf/sling/trunk Sling
> 2) mvn -s /dev/null install                 (I had to apply the attached sling.diff for this to be successful)
> 3) cd launchpad/app/
> 4) java -jar target/org.apache.sling.launchpad.app-6-SNAPSHOT.jar -c sling
> 5) http://localhost:8080/system/console
> 6) set "Allow Anonymous Access" to false (org.apache.sling.engine.impl.auth.SlingAuthenticator) 
> 7) go to http://localhost:8080/
> Result:
> - The log says: org.apache.sling.engine.impl.auth.SlingAuthenticator getAnonymousSession: Anonymous access not allowed by configuration - redirecting to login
> - Firefox: HTTP ERROR 200 , Problem accessing /. Reason: OK
> There is also quite a lot of noise in the error.log:
> *WARN* [SCR Component Actor] org.apache.sling.jcr.jackrabbit.server.impl.security.PluggableDefaultAccessManager No pluggable AccessManager available, falling back to DefaultAccessManager

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (SLING-1134) GET for http://localhost:8080/ results in HTTP ERROR 200

Posted by "Andreas Amstutz (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/SLING-1134?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12786698#action_12786698 ] 

Andreas Amstutz commented on SLING-1134:
----------------------------------------

"?sling:authRequestLogin=1" is still needed by Safari users ... otherwise login to the admin console won't be successful 

> GET for http://localhost:8080/ results in HTTP ERROR 200
> --------------------------------------------------------
>
>                 Key: SLING-1134
>                 URL: https://issues.apache.org/jira/browse/SLING-1134
>             Project: Sling
>          Issue Type: Bug
>          Components: Extensions
>    Affects Versions: Extensions httpauth 2.0.4
>         Environment: Mac OS X 10.6.1, java version "1.6.0_15"
> Firefox (3.5.3)
>            Reporter: Andreas Amstutz
>            Assignee: Felix Meschberger
>             Fix For: Extensions httpauth 2.0.6
>
>         Attachments: error.log, sling.diff
>
>
> A GET for http://localhost:8080/ results in HTTP ERROR 200
> Steps to reproduce this:
> 1) svn checkout http://svn.apache.org/repos/asf/sling/trunk Sling
> 2) mvn -s /dev/null install                 (I had to apply the attached sling.diff for this to be successful)
> 3) cd launchpad/app/
> 4) java -jar target/org.apache.sling.launchpad.app-6-SNAPSHOT.jar -c sling
> 5) http://localhost:8080/system/console
> 6) set "Allow Anonymous Access" to false (org.apache.sling.engine.impl.auth.SlingAuthenticator) 
> 7) go to http://localhost:8080/
> Result:
> - The log says: org.apache.sling.engine.impl.auth.SlingAuthenticator getAnonymousSession: Anonymous access not allowed by configuration - redirecting to login
> - Firefox: HTTP ERROR 200 , Problem accessing /. Reason: OK
> There is also quite a lot of noise in the error.log:
> *WARN* [SCR Component Actor] org.apache.sling.jcr.jackrabbit.server.impl.security.PluggableDefaultAccessManager No pluggable AccessManager available, falling back to DefaultAccessManager

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Closed: (SLING-1134) GET for http://localhost:8080/ results in HTTP ERROR 200

Posted by "Andreas Amstutz (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/SLING-1134?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andreas Amstutz closed SLING-1134.
----------------------------------


I've just tested ... works perfectly now. Thanks

> GET for http://localhost:8080/ results in HTTP ERROR 200
> --------------------------------------------------------
>
>                 Key: SLING-1134
>                 URL: https://issues.apache.org/jira/browse/SLING-1134
>             Project: Sling
>          Issue Type: Bug
>          Components: Extensions
>    Affects Versions: Extensions httpauth 2.0.4
>         Environment: Mac OS X 10.6.1, java version "1.6.0_15"
> Firefox (3.5.3)
>            Reporter: Andreas Amstutz
>            Assignee: Felix Meschberger
>             Fix For: Extensions httpauth 2.0.6
>
>         Attachments: error.log, sling.diff
>
>
> A GET for http://localhost:8080/ results in HTTP ERROR 200
> Steps to reproduce this:
> 1) svn checkout http://svn.apache.org/repos/asf/sling/trunk Sling
> 2) mvn -s /dev/null install                 (I had to apply the attached sling.diff for this to be successful)
> 3) cd launchpad/app/
> 4) java -jar target/org.apache.sling.launchpad.app-6-SNAPSHOT.jar -c sling
> 5) http://localhost:8080/system/console
> 6) set "Allow Anonymous Access" to false (org.apache.sling.engine.impl.auth.SlingAuthenticator) 
> 7) go to http://localhost:8080/
> Result:
> - The log says: org.apache.sling.engine.impl.auth.SlingAuthenticator getAnonymousSession: Anonymous access not allowed by configuration - redirecting to login
> - Firefox: HTTP ERROR 200 , Problem accessing /. Reason: OK
> There is also quite a lot of noise in the error.log:
> *WARN* [SCR Component Actor] org.apache.sling.jcr.jackrabbit.server.impl.security.PluggableDefaultAccessManager No pluggable AccessManager available, falling back to DefaultAccessManager

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (SLING-1134) GET for http://localhost:8080/ results in HTTP ERROR 200

Posted by "Felix Meschberger (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/SLING-1134?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12786804#action_12786804 ] 

Felix Meschberger commented on SLING-1134:
------------------------------------------

The latest trunk version of the HTTP Header Authenticator has a new configuration setting which disables the form and uses plain old HTTP Basic Authentication based on the 401 status: auth.http.form.

So setting this propery may probably help Safari and Chrome users.

> GET for http://localhost:8080/ results in HTTP ERROR 200
> --------------------------------------------------------
>
>                 Key: SLING-1134
>                 URL: https://issues.apache.org/jira/browse/SLING-1134
>             Project: Sling
>          Issue Type: Bug
>          Components: Extensions
>    Affects Versions: Extensions httpauth 2.0.4
>         Environment: Mac OS X 10.6.1, java version "1.6.0_15"
> Firefox (3.5.3)
>            Reporter: Andreas Amstutz
>            Assignee: Felix Meschberger
>             Fix For: Extensions httpauth 2.0.6
>
>         Attachments: error.log, sling.diff
>
>
> A GET for http://localhost:8080/ results in HTTP ERROR 200
> Steps to reproduce this:
> 1) svn checkout http://svn.apache.org/repos/asf/sling/trunk Sling
> 2) mvn -s /dev/null install                 (I had to apply the attached sling.diff for this to be successful)
> 3) cd launchpad/app/
> 4) java -jar target/org.apache.sling.launchpad.app-6-SNAPSHOT.jar -c sling
> 5) http://localhost:8080/system/console
> 6) set "Allow Anonymous Access" to false (org.apache.sling.engine.impl.auth.SlingAuthenticator) 
> 7) go to http://localhost:8080/
> Result:
> - The log says: org.apache.sling.engine.impl.auth.SlingAuthenticator getAnonymousSession: Anonymous access not allowed by configuration - redirecting to login
> - Firefox: HTTP ERROR 200 , Problem accessing /. Reason: OK
> There is also quite a lot of noise in the error.log:
> *WARN* [SCR Component Actor] org.apache.sling.jcr.jackrabbit.server.impl.security.PluggableDefaultAccessManager No pluggable AccessManager available, falling back to DefaultAccessManager

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.