DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://issues.apache.org/bugzilla/show_bug.cgi?id=37934>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=37934 Summary: Tomcat does not follow SRV 12.8.3 regarding empty auth- constraint Product: Tomcat 5 Version: 5.5.14 Platform: All OS/Version: Windows XP Status: NEW Severity: normal Priority: P2 Component: Catalina AssignedTo: tomcat-dev@jakarta.apache.org ReportedBy: [EMAIL PROTECTED] Point 2 in Section SRV 12.8.3 in servlet spec states the container shall reject a request (403) if access to such resource has been precluded by an empty auth- constraint element. However, Tomcat up to 5.5.14 returns 401 in the test. How to reproduce: - Deploy attached file - Visit http://localhost:8080/httpmethod/HTTPMethod/POST This should not ask for any credential at all. -- Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
