Newbie question about digest authentication

[pgoldweic]

Hi,
I've just started using httpClient (version 3.1 at the moment), and I'm not
clear as to the 'bigger' picture of using digest authentication with a
particular get/post method. That is,
I have a simple test case working with basic authentication and the tomcat
MemoryRealm, but would like to understand whether, if I were to switch to
'digest' authentication in httpclient,
- I would also need to switch tomcat's realm configuration to use the
'digest' attribute or not?
- I would need to encrypt the paswords in the tomcat-users file? (for
testing purposes, I am just using the Memory realm with the default user
file)
- I would need to configure my web.xml file to use DIGEST authentication or
BASIC authentication?.
I think ideally it would be great if I could see some sample code that uses
digest authentication, and includes the corresponding tomcat realm
definition/web.xml file.
Thanks in advance for any pointers,
-Patricia
 
pgoldweic@...
 

[olegk]

On Wed, Jun 17, 2009 at 05:39:45PM -0500, Patricia Goldweic wrote:

> Hi,
> I've just started using httpClient (version 3.1 at the moment), and I'm not
> clear as to the 'bigger' picture of using digest authentication with a
> particular get/post method. That is,
> I have a simple test case working with basic authentication and the tomcat
> MemoryRealm, but would like to understand whether, if I were to switch to
> 'digest' authentication in httpclient,
> - I would also need to switch tomcat's realm configuration to use the
> 'digest' attribute or not?
> - I would need to encrypt the paswords in the tomcat-users file? (for
> testing purposes, I am just using the Memory realm with the default user
> file)
> - I would need to configure my web.xml file to use DIGEST authentication or
> BASIC authentication?.
> I think ideally it would be great if I could see some sample code that uses
> digest authentication, and includes the corresponding tomcat realm
> definition/web.xml file.
> Thanks in advance for any pointers,
> -Patricia
>  
> pgoldweic@...
>

Hi Patricia

HttpClient will automatically pick up Digest over Basic if both are supported
by the remote host. There is virtually no difference between Digest and Basic
from the HttpClient user perspective.

As far as Tomcat configuration concerned you will have a better luck asking
those questions on the Tomcat user list.

Oleg

 

---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-users-unsubscribe@...
For additional commands, e-mail: httpclient-users-help@...

[pgoldweic]

Thanks,
-Patricia

pgoldweic@...
 

> -----Original Message-----
> From: Oleg Kalnichevski [mailto:olegk@...]
> Sent: Thursday, June 18, 2009 8:51 AM
> To: HttpClient User Discussion
> Subject: Re: Newbie question about digest authentication
>
> On Wed, Jun 17, 2009 at 05:39:45PM -0500, Patricia Goldweic wrote:
> > Hi,
> > I've just started using httpClient (version 3.1 at the moment), and
> > I'm not clear as to the 'bigger' picture of using digest
> > authentication with a particular get/post method. That is, I have a
> > simple test case working with basic authentication and the tomcat
> > MemoryRealm, but would like to understand whether, if I
> were to switch
> > to 'digest' authentication in httpclient,
> > - I would also need to switch tomcat's realm configuration
> to use the
> > 'digest' attribute or not?
> > - I would need to encrypt the paswords in the tomcat-users
> file? (for
> > testing purposes, I am just using the Memory realm with the default
> > user
> > file)
> > - I would need to configure my web.xml file to use DIGEST
> > authentication or BASIC authentication?.
> > I think ideally it would be great if I could see some
> sample code that
> > uses digest authentication, and includes the corresponding tomcat
> > realm definition/web.xml file.
> > Thanks in advance for any pointers,
> > -Patricia
> >  
> > pgoldweic@...
> >
>
> Hi Patricia
>
> HttpClient will automatically pick up Digest over Basic if
> both are supported by the remote host. There is virtually no
> difference between Digest and Basic from the HttpClient user
> perspective.
>
> As far as Tomcat configuration concerned you will have a
> better luck asking those questions on the Tomcat user list.
>
> Oleg
>
>  
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: httpclient-users-unsubscribe@...
> For additional commands, e-mail: httpclient-users-help@...
>

---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-users-unsubscribe@...
For additional commands, e-mail: httpclient-users-help@...