[Xitami] Password problems

[Don Gordon]

Thank you for the reply.

The HTML file is located in a password protected directory while the sound
file (109k) and movie file (188k) are in subdirectories of the above. The
problem does not occur in Netscape and is occasionally fixed if the page is
refreshed in IE, but not always. I have also experimented using .ra as well
as .rpm files, no difference. The problem does not occur if the web page has
only one RealAudio file or if tested on the same computer as the server. I
have also tried setting same usernames and passwords to the subdirectories
with no effect.

You can check the test site at http://130.95.10.131/test/lesson01-08.html.
The username and password are both "test". The site is normally set up for
an intranet so loading may be slow. If by some small chance the page plays
normally, clear IE's temporary files and reload.

Further assistance would be appreciated.

Don Gordon

----- Original Message -----
From: "Ewen McNeill" <ewen@imatix.com>
To: <xitami@lists.xitami.org>
Sent: Tuesday, June 19, 2001 6:01 PM
Subject: Re: [Xitami] Password problems


> In message <000c01c0f85a$99d9b260$830a5f82@hm.uwa.edu.au>, "Don Gordon"
writes:
> >Using Xitami v2.4d9 on Windows 98. Have set up directory password list in
> >defaults.aut. This setup works fine except with IE when it encounters a
web
> >page that contains 2 Real Audio files. The page loads ok but when you
click
> >on the play button IE requests the Username & Password again before it
will
> >play the file. The problem does not occur if password restrictions are
> >removed.
>
> Is it IE requesting the username/password again?  Or real player?
>
> There's two things I can think of which might be going on here:
> (a) the files are in different directories, and you've got two sets of
>     protections being applied, with different realms.  You can work
>     around this problem by setting the realm name in the .aut file
>     for both protected directories to be the same (and making sure the
>     same usernames/passwords apply to both).
>
> (b) IE (which gets the authentication for the HTML page) and real player
>     (which gets the authentication for the audio) do not talk to each
>     other to exchange authentication information.  Which mean that both
>     have to ask for that information.  This is certainly the case when
>     real player is used externally, but I'm not sure if it is the case
>     when it is embedded in a webpage.
>
> Basically if you are going to password protect both HTML and audio, and
> use two applications which don't talk to each other to exchange password
> information, then both will have to ask the user for the password
> information.
>
> There are ways to design a system that protects the HTML and audio
> without requiring the password to be entered twice, but it requires
> server-side code (CGIs, LRWP, servlets, etc), and doing much of the
> server-side authentication handling yourself, rather than relying on the
> webservers build in basic authentication.
>
> Ewen
>
> --
> Ewen McNeill, Technical Consultant, iMatix Corporation  www.imatix.com
>
> --
> Xitami Users Mailing List -- For Xitami support
> To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami
>