Re: Authenticate "on demand"

[cozzi@xxxxxxxxx]

   Got it to ask for the user id and password.
   Great.
   But it seems to be requiring it to be entered 3 times before it takes it,
   but even then it still doesn't sing off the prior sign-on user id.  :(
    
   -BOb

    

     -------- Original Message --------
     Subject: Re: [WEB400] Authenticate "on demand"
     From: Matt.Haas@xxxxxxxxxxx
     Date: Wed, March 29, 2006 8:12 am
     To: <web400@xxxxxxxxxxxx>

     That looks right. I just hit a site using basic auth that we have and
     here's the headers I got back:

     HTTP/1.1 401 Authorization Required
     Accept-Ranges: bytes
     Content-Type: text/html; charset=ISO-8859-1
     Connection: close
     Date: Wed, 29 Mar 2006 14:08:20 GMT
     WWW-Authenticate: Basic realm="Customer_Service"
     Server: Apache/2.0.52 (iSeries)
     Content-Length: 975

     I don't know if order makes any difference or not.

     Matt

     -----Original Message-----
     From: web400-bounces+matt.haas=thomson.com@xxxxxxxxxxxx
     [mailto:web400-bounces+matt.haas=thomson.com@xxxxxxxxxxxx] On Behalf Of
     Bob Cozzi
     Sent: Tuesday, March 28, 2006 10:00 PM
     To: 'Web Enabling the AS400 / iSeries'
     Subject: Re: [WEB400] Authenticate "on demand"

     Matt,
     Are you suggesting that I send something like the following:

     Status 401 Unauthorized
     WWW-Authenticate: Basic realm="cPanel"
     Connection: close

     -Bob

     -----Original Message-----
     From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]
     On
     Behalf Of Matt.Haas@xxxxxxxxxxx
     Sent: Tuesday, March 28, 2006 3:42 PM
     To: web400@xxxxxxxxxxxx
     Subject: Re: [WEB400] Authenticate "on demand"

     Bob,

     If you are using basic authentication, you'll need to send an
     Authenticate HTTP header to get the browser to pop up the authentication
     dialog.

     Matt

     -----Original Message-----
     From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]
     On Behalf Of cozzi@xxxxxxxxx
     Sent: Tuesday, March 28, 2006 2:01 PM
     To: Web Enabling the AS400 / iSeries
     Subject: [WEB400] Authenticate "on demand"

       I need to have users log onto the 400 via a web page.
       Got that working fine... authentication does it.
        
       But if they sit there for more than 30 minutes, I need to have the
       authentication expire and when they go to another page, "force" them
     to
       sign on again.
        
       I've tried several HTTP Headers, but nothing seems to force them to
       re-signon.
        
       Any ideas?
        
       -Bob Cozzi
        
        
     --
     This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
     To post a message email: WEB400@xxxxxxxxxxxx
     To subscribe, unsubscribe, or change list options,
     visit: http://lists.midrange.com/mailman/listinfo/web400
     or email: WEB400-request@xxxxxxxxxxxx
     Before posting, please take a moment to review the archives
     at http://archive.midrange.com/web400.

     --
     This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
     To post a message email: WEB400@xxxxxxxxxxxx
     To subscribe, unsubscribe, or change list options,
     visit: http://lists.midrange.com/mailman/listinfo/web400
     or email: WEB400-request@xxxxxxxxxxxx
     Before posting, please take a moment to review the archives
     at http://archive.midrange.com/web400.

     --
     This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
     To post a message email: WEB400@xxxxxxxxxxxx
     To subscribe, unsubscribe, or change list options,
     visit: http://lists.midrange.com/mailman/listinfo/web400
     or email: WEB400-request@xxxxxxxxxxxx
     Before posting, please take a moment to review the archives
     at http://archive.midrange.com/web400.

     --
     This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
     To post a message email: WEB400@xxxxxxxxxxxx
     To subscribe, unsubscribe, or change list options,
     visit: http://lists.midrange.com/mailman/listinfo/web400
     or email: WEB400-request@xxxxxxxxxxxx
     Before posting, please take a moment to review the archives
     at http://archive.midrange.com/web400.