Re: Ideas for password-protecting live site

On Tue, 09 May 2006 08:34:48 -0700, you wrote:

>If you want to force all users to enter a password, then use this instead:
>
><Location />

That worked! Thanks, and for all the other replies. But I now have a
dumb problem. I created a htpasswd file with the unique username
"access" - this userid doesnt exist in the db-backed resin
authentication scheme I'm using. When I use the "access" name in the
Apache prompt, I'm taken to the site but am logged in as "access"!
This causes havoc, as the site is pretty heavily role-based, so resin
sees the user as valid but with no roles. Can the 2 credentials be
maintained in the same session?