You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Di...@eurotours.at on 2008/07/28 15:50:03 UTC

[users@httpd] basic auth proxy rq with RewriteRule

Hello List,

I work since some days on this problem and don't find any solution.

Background:

I have a glassfish app-server which generate a webservice and the
wsdl file with the xsd file. Now I wan't secure this with basic auth.

I did this with glassfish.

Now the problem is that the wsdl file has the same entrypoint as the
webservice and many tools and ide's has problems, when the wsdl is
secured with basic auth. And generally I don't want secure the wsdl.

The urls look like:

https://myserver/foo/ws  for the webservice and
https://myserver/foo/ws?wsdl for wsdl and 
https://myserver/foo/ws?xsd=1 for the scheam.

I made many tryouts with a RewriteRules.

My idea is, that I make a RewriteRule with the [P] and at this
point I code https://username:password@myserver/foo/ws?wsdl.
But with this I run always into the same rule (infinity)

The config look like:
RewriteCond %{QUERY_STRING} wsdl
RewriteRule /foo/wshttp://username:password@myserver/foo/ws?wsdl  [P]

So I try to make a request direct to glasswith at the
RewriteRule like http://username:password@myserver:8080/foo/ws?wsdl
on the http connector from glassfish but mod_rewrite remove
the username and the password from the url (I check it with wireshark)
and so I alwas get the basic prompt when I access with browser.

I hope that I exlpain the problem well enough with my poor english :-)

System: Apache2 on Windows

Any hint or idea is welcome

regards Dietmar


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org