My Oracle Support Banner

Problem With Unprotected URIs Getting ACL Prompt For Authentication on Oracle iPlanet Web Server 6.1 (Doc ID 1392716.1)

Last updated on MARCH 19, 2020

Applies to:

Oracle iPlanet Web Server - Version 6.1 and later
Information in this document applies to any platform.

Symptoms


On Oracle iPlanet Web Server 6.1, with ACL protection configured for the stats-xml and perfdump pages only, directories that are not ACL protected are still getting prompted for ACL authentication.

Review of the iPlanet Web Server  access logs shows that requests for URIs that are unprotected are getting 401 Unauthorized HTTP error code responses:

> grep " 401 " access
xxx.xxx.xxx.xxx - - [27/Oct/2011:01:52:37 +0000] "GET /unprotectedURI/ HTTP/1.1" 401 223
xxx.xxx.xxx.xxx - - [27/Oct/2011:01:52:37 +0000] "GET /unprotectedURI/ HTTP/1.1" 401 223
xxx.xxx.xxx.xxx - - [27/Oct/2011:01:52:37 +0000] "GET /unprotectedURI/ HTTP/1.1" 401 223
xxx.xxx.xxx.xxx - - [27/Oct/2011:01:52:37 +0000] "GET /unprotectedURI/ HTTP/1.1" 401 223




Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
 Workaround 1
 Workaround 2 (Preferred)
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.