Re: Apache removal of user's access rights

Beth E. Okun wrote:
> 
> We're running Apache with ssl enabled..........We're using Basic 
> authentication, and if the user browses away from our site and then 
> comes back, they are not forced to log on again.......it appears that 
> these settings are being stored somewhere, or that the connection is not 
> being closed..........

How about to read about how Basic Authentication works? Or maybe watch 
the traffic with http://livehttpheaders.mozdev.org? Basically the 
browser caches username/password once entered for a HTTP authc realm and 
sends it in the header of every HTTP request. That's the problem with 
HTTP basic authc.

Ciao, Michael.
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [email protected]
Automated List Manager                            [email protected]