You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2010/04/05 20:14:43 UTC
DO NOT REPLY [Bug 49048] New: ACL not applied to redirect URLs
https://issues.apache.org/bugzilla/show_bug.cgi?id=49048
Summary: ACL not applied to redirect URLs
Product: Tomcat Connectors
Version: 1.2.28
Platform: PC
OS/Version: Windows Server 2003
Status: NEW
Severity: normal
Priority: P2
Component: isapi
AssignedTo: dev@tomcat.apache.org
ReportedBy: joseph_lawson@sra.com
Directories intercepted by the isapi_redirect do not interpret the permissions
created in IIS directories.
To replicate this:
Configure the isapi_redirect as normal and make sure an application is being
fowarded such as /manager. Create a directory in the IIS site with the same
name as the redirect URL listed in the uriworkermap.properties, like manager.
Turn off anonymous access to the site to force basic authentication and apply
ACL restrictions on the /manager site such that access is restricted.
Result: The user is prompted for credentials but only parent directory
permissions are applied, not the specific directories rights. Being that all
authentication is being handled by IIS, the directory permissions should be
applied as setup in IIS.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
DO NOT REPLY [Bug 49048] ACL not applied to redirect URLs
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=49048
Mladen Turk <mt...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |WONTFIX
--- Comment #1 from Mladen Turk <mt...@apache.org> 2011-11-08 13:48:19 UTC ---
isapi_redirect is forward proxy.
It has no knowledge of the underlying file system, neither it should. It works
strictly on url basis and its mappings are unrelated to the physical file
system.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org