"Junp to page" behind an Apache server

[Marco K.]

Hi all,

has anyone already tried the "Junp to page" feature of the release 1.9.0
behind an Apache server?

When I type the page name, I'm asked for authentication again and again.

Here is my apache config:

<Location /xwiki>
  SSLRequireSSL
  AuthType Basic
  AuthName "xwiki is a restricted area."
  AuthUserFile E:\Programme\xampp\apache\etc\passwd
  Require valid-user
  ProxyPass ajp://127.0.0.1:8019/xwiki
  ProxyPassReverse ajp://127.0.0.1:8019/xwiki
</Location>

My XWiki installation:

XWiki 1.9.0
MySQL 5
Tomcat 5.0.28


Thanks a lot,
Marco
_______________________________________________
users mailing list
[hidden email]
http://lists.xwiki.org/mailman/listinfo/users

[Sergiu Dumitriu-2]

Marco K. wrote:
> Hi all,
>
> has anyone already tried the "Junp to page" feature of the release 1.9.0
> behind an Apache server?
>
> When I type the page name, I'm asked for authentication again and again.

This is caused by the fact that the REST service doesn't handle basic
authentication.

--
Sergiu Dumitriu
http://purl.org/net/sergiu/
_______________________________________________
users mailing list
[hidden email]
http://lists.xwiki.org/mailman/listinfo/users

[Marco K.]

Hi Sergiu,

Sergiu Dumitriu wrote:

> Marco K. wrote:
>  
>> Hi all,
>>
>> has anyone already tried the "Junp to page" feature of the release 1.9.0
>> behind an Apache server?
>>
>> When I type the page name, I'm asked for authentication again and again.
>>    
>
> This is caused by the fact that the REST service doesn't handle basic
> authentication.

I'm not that REST expert... is this a matter of the Apache server or the
Xwiki application?
Thanks for clarifying.

Cheers, Marco
_______________________________________________
users mailing list
[hidden email]
http://lists.xwiki.org/mailman/listinfo/users

[Sergiu Dumitriu-2]

Marco K. wrote:

> Hi Sergiu,
>
> Sergiu Dumitriu wrote:
>> Marco K. wrote:
>>  
>>> Hi all,
>>>
>>> has anyone already tried the "Junp to page" feature of the release 1.9.0
>>> behind an Apache server?
>>>
>>> When I type the page name, I'm asked for authentication again and again.
>>>    
>> This is caused by the fact that the REST service doesn't handle basic
>> authentication.
>
> I'm not that REST expert... is this a matter of the Apache server or the
> Xwiki application?
> Thanks for clarifying.

It's on the XWiki side.

Sergiu Dumitriu
http://purl.org/net/sergiu/
_______________________________________________
users mailing list
[hidden email]
http://lists.xwiki.org/mailman/listinfo/users

[Sergiu Dumitriu-2]

Marco K. wrote:

> Hi Sergiu,
>
> Sergiu Dumitriu wrote:
>> Marco K. wrote:
>>  
>>> Hi all,
>>>
>>> has anyone already tried the "Junp to page" feature of the release 1.9.0
>>> behind an Apache server?
>>>
>>> When I type the page name, I'm asked for authentication again and again.
>>>    
>> This is caused by the fact that the REST service doesn't handle basic
>> authentication.
>
> I'm not that REST expert... is this a matter of the Apache server or the
> Xwiki application?
> Thanks for clarifying.

Are you sure you need the Apache basic authentication?


--
Sergiu Dumitriu
http://purl.org/net/sergiu/
_______________________________________________
users mailing list
[hidden email]
http://lists.xwiki.org/mailman/listinfo/users

[Marco K.]

Sergiu Dumitriu wrote:

> Marco K. wrote:
>  
>> Hi Sergiu,
>>
>> Sergiu Dumitriu wrote:
>>    
>>> Marco K. wrote:
>>>  
>>>      
>>>> Hi all,
>>>>
>>>> has anyone already tried the "Junp to page" feature of the release 1.9.0
>>>> behind an Apache server?
>>>>
>>>> When I type the page name, I'm asked for authentication again and again.
>>>>    
>>>>        
>>> This is caused by the fact that the REST service doesn't handle basic
>>> authentication.
>>>      
>> I'm not that REST expert... is this a matter of the Apache server or the
>> Xwiki application?
>> Thanks for clarifying.
>>    
>
>
> Are you sure you need the Apache basic authentication?
>  

Unfortunately, yes (unless there is an other way to secure a web
application?).

The xwiki acts as an intranet application that needs to be accessed from
"outside".

Cheers, Marco

_______________________________________________
users mailing list
[hidden email]
http://lists.xwiki.org/mailman/listinfo/users

[Fabio Mancinelli-4]

On Jun 21, 2009, at 2:49 PM, Sergiu Dumitriu wrote:

> Marco K. wrote:
>> Hi all,
>>
>> has anyone already tried the "Junp to page" feature of the release  
>> 1.9.0
>> behind an Apache server?
>>
>> When I type the page name, I'm asked for authentication again and  
>> again.
>
> This is caused by the fact that the REST service doesn't handle basic
> authentication.
>

Actually it's correct.
REST supports basic authentication. The problem is that it uses the  
credentials provided in the authorization header to authenticate the  
XWiki users, and if authentication fails it challenges the client with  
a 403 forbidden header (that's why the browser keeps opening the auth  
dialog again and again)

What happens, in this case, is that the username:password provided to  
bypass .htaccess is also used to authenticate the xwiki and this, of  
course, fails.

We were discussing of it yesterday and a solution would be to fallback  
to cookie authentication if the basic auth fails.

-Fabio


_______________________________________________
users mailing list
[hidden email]
http://lists.xwiki.org/mailman/listinfo/users