INETS authentication bug

Peter L erlang@REDACTED
Tue Dec 14 15:18:00 CET 2004


It seems like the standard webreader authentication does not
really work as it should in inets.

When surfing to a page in a restricted area on the server,
the popup window for entering user and password comes up as
it should. No problem here.

But if you enter wrong password or user and press ok, I only
get a page returned to me saying:

"Unauthorized
 This server could not verify that you are authorized to
 access the document you requested. Either you supplied
 the wrong credentials (e.g., bad password), or your browser
 doesn't understand how to supply the credentials required."

Now in order to reenter the password correctly, the user is
forced to close down all webreader windows and start it up
again, just in order to make a new login attempt.

The problem seems to be that INETS does not respond in the
correct way, telling the browser that the password supplied
was wrong. The webreader (Netscape7.2) then assumes the user/
password is correct and supplies INETS with the same faulty
user/pw combination everytime surfing back to the same page.

Are you aware of this problem already? Is there a fix for this
in INETS already?

Best regards,
Peter Lund




More information about the erlang-bugs mailing list