Digest Authentication and IE on Apache

troubles with the query string

[rabbit_fufu]

Hi Guys, I'm hoping someone here can help me out as this is driving me crazy...

I'd like to use Digest Authentication (Apache) to protect the login info to a content management system I'm writing. The whole thing is done, the only trouble is, when I set up digest authentication on the server I discovered that urls that have a querystring in them generate an http 400 error in explorer - bad request.

so for example, an url like this:

[mysite.com...]

will generate an error if it is in digest auth protected folder, even though it is a completely valid url.

From what I can see this only occurs in IE (I'm on 6.0) - unfortuneately my content managment web app relies on some mshtml libraries, so I have no choice but to use ie.

Does anyone know of a patch or workaround for this problem?

Thanks in advance for your help, I appreciate it!

[delboy1978uk]

Perhaps it is the permissions of the folder you are using for your protected content - i assume you are in windows xp.

Have you tried right clicking your folder and clicking the security tab (if you dont see a security tab then you you must disable SIMPLE file sharing to get to advanced mode)

The users that are allowed access to your folder should include the IUSR account which is an internet explorer user account and give it control of the folder to read write etc

i am not sure whether you only need to do this if you are using IIS and not Apache but you should try giving it a go

[jrs1004]

Did you ever solve this problem? I went into the "Security" tab on the folder I needed to fix, but there was no user "IUSR" in the list.

Let me know what you did.