Hello List, I work since some days on this problem and don't find any solution. Background: I have a glassfish app-server which generate a webservice and the wsdl file with the xsd file. Now I wan't secure this with basic auth. I did this with glassfish. Now the problem is that the wsdl file has the same entrypoint as the webservice and many tools and ide's has problems, when the wsdl is secured with basic auth. And generally I don't want secure the wsdl. The urls look like: https://myserver/foo/ws for the webservice and https://myserver/foo/ws?wsdl for wsdl and https://myserver/foo/ws?xsd=1 for the scheam. I made many tryouts with a RewriteRules. My idea is, that I make a RewriteRule with the [P] and at this point I code https://username:password@myserver/foo/ws?wsdl. But with this I run always into the same rule (infinity) The config look like: RewriteCond %{QUERY_STRING} wsdl RewriteRule /foo/wshttp://username:password@myserver/foo/ws?wsdl [P] So I try to make a request direct to glasswith at the RewriteRule like http://username:password@myserver:8080/foo/ws?wsdl on the http connector from glassfish but mod_rewrite remove the username and the password from the url (I check it with wireshark) and so I alwas get the basic prompt when I access with browser. I hope that I exlpain the problem well enough with my poor english :-) System: Apache2 on Windows Any hint or idea is welcome regards Dietmar --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx