Hi Eric, I'm mimicking what we currently have for other secured resources...although this is the first java based resource that we're trying to apply basic auth to. One thing I do notice in my tomcat log is that the first request to the secured resource is fine, but any subsequent request throws a 401 and the below is placed in the log. Somehow the response coming from the Server to Client is getting jumbled up. For some perl resources, we have some additional properties in the httpd config like defining a PerlResponseHandler, maybe there is a Java equivalent that I'm missing...any suggestions? httpd config: <Location "/reportsvcs_ws"> Order allow,deny Allow from all AuthType Basic AuthName "Report Service" AuthUserFile /opt/proofpoint/current/admin/etc/admind/miniserv.users require valid-user </Location> Tomcat Log: Jan 11, 2010 7:53:04 AM com.sun.jersey.api.client.filter.LoggingFilter log INFO: 1 * Client in-bound response 1 < 401 1 < WWW-Authenticate: Basic realm="Report Service" 1 < Date: Mon, 11 Jan 2010 15:53:04 GMT 1 < Vary: Accept-Encoding 1 < Content-Length: 401 1 < Keep-Alive: timeout=15, max=100 1 < Connection: Keep-Alive 1 < Content-Type: text/html; charset=iso-8859-1 1 < Server: Apache/2.2.9 1 < <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Authorization Required</title> </head><body> <h1>Authorization Required</h1> <p>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> </body></html> Eric Covener wrote: > > On Sun, Jan 10, 2010 at 5:55 PM, cgswtsu78 <cgray@xxxxxxxxxxxxxx> wrote: >> >> Hello, >> >> AuthUserFile filepath/usersfile > > Does this have to be absolute? What does your errorlog say? > > -- > Eric Covener > covener@xxxxxxxxx > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server Project. > See <URL:http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > > -- View this message in context: http://old.nabble.com/401-Error-with-Basic-Auth-tp27103585p27114095.html Sent from the Apache HTTP Server - Users mailing list archive at Nabble.com. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx