[xwiki-users] "Junp to page" behind an Apache server
Hi all, has anyone already tried the "Junp to page" feature of the release 1.9.0 behind an Apache server? When I type the page name, I'm asked for authentication again and again. Here is my apache config: <Location /xwiki> SSLRequireSSL AuthType Basic AuthName "xwiki is a restricted area." AuthUserFile E:\Programme\xampp\apache\etc\passwd Require valid-user ProxyPass ajp://127.0.0.1:8019/xwiki ProxyPassReverse ajp://127.0.0.1:8019/xwiki </Location> My XWiki installation: XWiki 1.9.0 MySQL 5 Tomcat 5.0.28 Thanks a lot, Marco
Marco K. wrote:
Hi all,
has anyone already tried the "Junp to page" feature of the release 1.9.0 behind an Apache server?
When I type the page name, I'm asked for authentication again and again.
This is caused by the fact that the REST service doesn't handle basic authentication. -- Sergiu Dumitriu http://purl.org/net/sergiu/
Hi Sergiu, Sergiu Dumitriu wrote:
Marco K. wrote:
Hi all,
has anyone already tried the "Junp to page" feature of the release 1.9.0 behind an Apache server?
When I type the page name, I'm asked for authentication again and again.
This is caused by the fact that the REST service doesn't handle basic authentication.
I'm not that REST expert... is this a matter of the Apache server or the Xwiki application? Thanks for clarifying. Cheers, Marco
Marco K. wrote:
Hi Sergiu,
Sergiu Dumitriu wrote:
Marco K. wrote:
Hi all,
has anyone already tried the "Junp to page" feature of the release 1.9.0 behind an Apache server?
When I type the page name, I'm asked for authentication again and again.
This is caused by the fact that the REST service doesn't handle basic authentication.
I'm not that REST expert... is this a matter of the Apache server or the Xwiki application? Thanks for clarifying.
It's on the XWiki side. Sergiu Dumitriu http://purl.org/net/sergiu/
Marco K. wrote:
Hi Sergiu,
Sergiu Dumitriu wrote:
Marco K. wrote:
Hi all,
has anyone already tried the "Junp to page" feature of the release 1.9.0 behind an Apache server?
When I type the page name, I'm asked for authentication again and again.
This is caused by the fact that the REST service doesn't handle basic authentication.
I'm not that REST expert... is this a matter of the Apache server or the Xwiki application? Thanks for clarifying.
Are you sure you need the Apache basic authentication? -- Sergiu Dumitriu http://purl.org/net/sergiu/
Sergiu Dumitriu wrote:
Marco K. wrote:
Hi Sergiu,
Sergiu Dumitriu wrote:
Marco K. wrote:
Hi all,
has anyone already tried the "Junp to page" feature of the release 1.9.0 behind an Apache server?
When I type the page name, I'm asked for authentication again and again.
This is caused by the fact that the REST service doesn't handle basic authentication.
I'm not that REST expert... is this a matter of the Apache server or the Xwiki application? Thanks for clarifying.
Are you sure you need the Apache basic authentication?
Unfortunately, yes (unless there is an other way to secure a web application?). The xwiki acts as an intranet application that needs to be accessed from "outside". Cheers, Marco
On Jun 21, 2009, at 2:49 PM, Sergiu Dumitriu wrote:
Marco K. wrote:
Hi all,
has anyone already tried the "Junp to page" feature of the release 1.9.0 behind an Apache server?
When I type the page name, I'm asked for authentication again and again.
This is caused by the fact that the REST service doesn't handle basic authentication.
Actually it's correct. REST supports basic authentication. The problem is that it uses the credentials provided in the authorization header to authenticate the XWiki users, and if authentication fails it challenges the client with a 403 forbidden header (that's why the browser keeps opening the auth dialog again and again) What happens, in this case, is that the username:password provided to bypass .htaccess is also used to authenticate the xwiki and this, of course, fails. We were discussing of it yesterday and a solution would be to fallback to cookie authentication if the basic auth fails. -Fabio
participants (3)
-
Fabio Mancinelli -
Marco K. -
Sergiu Dumitriu