On Sep 1, 2005, at 11:30 AM, Matthew Conway wrote:

On Sep 1, 2005, at 3:13 AM, Ludovic Dubost wrote:

Aren't you using a specific authentication system ? This looks like a problem in the authentication..
I heard about problems with attachments when using basic auth.

If I switch to form authentication, the problem goes away, so there is definitely something wrong with basic auth and attachments.
I'll see if I can debug it further unless someone else knows how to fix it.

Matt

--
You receive this message as a subscriber of the xwiki-dev@objectweb.org mailing list.
To unsubscribe: mailto:xwiki-dev-unsubscribe@objectweb.org
For general help: mailto:sympa@objectweb.org?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws

The reason this is happening is because on the multi-part POST, the http authorization header is not getting sent, and for some reason this causes a NPE in securityfilter. I used ethereal to sniff the headers, and on all other requests to the xwiki server, the authorization header is present, so I don't know what is special about multi-part posts that is causing the browser to not send the header? I tried using both firefox and safari on OSX with the same effect. I don't know enough about the http protocol to understand what is going on here, anyone care to explain it to me? Thanks,