Apache realms...again

[HodgeHi]

This time is something slightly different.

 

I have a secure area set up on the website (at the moment it's internal) and i would like to switch to https before logging in. How can i do this?

 

I have tried a redirect in the apache httpd sites config but it does not switch over to https just for that part of the site i have been using the following in the httpd sites conf file:

 

RewriteCond %{SERVER_PORT} !443

RewriteRule (.*) https://domainname/secure-area/index.html [R]

 

This comes after the realms that OS X server places in the sites conf file. I have the realm set to digest but it still sends in clear text according to Safari. If i can sort this i could reduce the digest to plain text and then it may resolve the issue of IE not being able to log in as apparently it does not fully support the RFC for digest???

 

Hope someone can help. This is the last piece of my puzzle now.

Edited January 28, 2008 by HodgeHi

[HodgeHi]

OK i can confirm that Digest does not work with IE since as soon as i changed it to basic i could log in.

 

I am still however having problems getting the http to switch to https to secure authentication. Is there an easy way to do this without having to add each user that is already in the OD to a .htaccess file?

 

I hope there is. I am still looking around the Internet but cannot find the thing i need.

 

I could encase the whole site in https but could just confuse the general users.