Problem With Unprotected URIs Getting ACL Prompt For Authentication on Oracle iPlanet Web Server 6.1 (Doc ID 1392716.1)

Last updated on NOVEMBER 05, 2016

Applies to:

Oracle iPlanet Web Server - Version: 6.1 and later   [Release: 6.1 and later ]
Information in this document applies to any platform.

Symptoms


On Oracle iPlanet Web Server 6.1, with ACL protection configured for the stats-xml and perfdump pages only, directories that are not ACL protected are still getting prompted for ACL authentication.

Review of the iPlanet Web Server  access logs shows that requests for URIs that are unprotected are getting 401 Unauthorized HTTP error code responses:

> grep " 401 " access
1.2.3.4 - - [27/Oct/2011:01:52:37 +0000] "GET /unprotectedURI/ HTTP/1.1" 401 223
1.2.3.4 - - [27/Oct/2011:01:52:37 +0000] "GET /unprotectedURI/ HTTP/1.1" 401 223
1.2.3.4 - - [27/Oct/2011:01:52:37 +0000] "GET /unprotectedURI/ HTTP/1.1" 401 223
1.2.3.4 - - [27/Oct/2011:01:52:37 +0000] "GET /unprotectedURI/ HTTP/1.1" 401 223



Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms