The moose likes Tomcat and the fly likes Tomcat 7 digest authentication issues Big Moose Saloon
  Search | Java FAQ | Recent Topics
Register / Login
JavaRanch » Java Forums » Products » Tomcat
Reply Bookmark "Tomcat 7 digest authentication issues" Watch "Tomcat 7 digest authentication issues" New topic
Author

Tomcat 7 digest authentication issues

Gomes Queries
Greenhorn

Joined: Jan 12, 2012
Posts: 1
Hi,

I wanted to test my application with enabling digest authentication in Tomcat 7 server. I did required changes for enabling digest authentication in server.xml and web.xml files.
Now if i send request with digest authentication credentials in challenge response, the digest authentication is not successful. Server is sending Challenge request again... Is there any issue with the digest authentication in tomcat 7?
If anyone can point me in the right direction, I would be most grateful.

Server response:
HTTP/1.1 401 Unauthorized
Cache-Control: private
Expires: Wed, 31 Dec 1969 18:00:00 CST
WWW-Authenticate: Digest realm="kn-poc", qop="auth", nonce="1326368848804:e3974bce21f6f499e32f2d28cc7b7491", opaque="17353BDB66CF1F07CA16E58C642FD62E"
Content-Type: text/html;charset=utf-8
Content-Length: 954
Date: Thu, 12 Jan 2012 11:47:28 GMT
Connection: close
Server: POCWS


Request with digest credentials:
GET /kn-subscriber-config/users/tel:+918123023338/index HTTP/1.0
Authorization: Digest username="918123021238", realm="kn-poc", nonce="1326368848804:e3974bce21f6f499e32f2d28cc7b7491", uri="/kn-subscriber-config/users/tel:+918123023338/index", algorithm=MD5, response="b771a29e0de6a1b57c98d82885a0a19e", qop=auth, nc=1, cnonce="1ba5062265113e506b85074861d02aae", opaque="17353BDB66CF1F07CA16E58C642FD62E"


Server response:
HTTP/1.1 401 Unauthorized
Cache-Control: private
Expires: Wed, 31 Dec 1969 18:00:00 CST
WWW-Authenticate: Digest realm="kn-poc", qop="auth", nonce="1326368849174:02cd2c03f3e47a01e018cc3020fe3cf0", opaque="17353BDB66CF1F07CA16E58C642FD62E"
Content-Type: text/html;charset=utf-8
Content-Length: 954
Date: Thu, 12 Jan 2012 11:47:28 GMT
Connection: close
Server: POCWS
Tim Holloway
Saloon Keeper

Joined: Jun 25, 2001
Posts: 12513

The right direction leads this way: http://www.javaranch.com/name.jsp


One of the most odious afflictions that Business has inflicted on the modern English language is "pro-active". Most of the time it's simply redundantly used in place of the simple old word "active". And a good deal of the rest of the time it means "You're not overworked enough yet, so go out and find more!"
 
 
subject: Tomcat 7 digest authentication issues
 
Threads others viewed
getRemoteUser
How to determine if HTTP authentication is required
Tomcat 6.0.26: Manager with DIGEST authentication
what is realm. ???
j_security_check 'next' page?
WebSphere development made easy
without the weight of IBM tools
http://www.myeclipseide.com