104542 - HTTP Authentication of embedded auth realms

Status: VERIFIED DUPLICATE of bug 54349

(Core :: Networking: HTTP, defect)

Description

[Marian]

OK, funny description, I know. Here is what it should tell:

Lets say you have an access limited site with an auth realm http://my.site.com/
an an "inner" realm http://my.site.com/somerealm/ (e.g. for a certain sub-group
of the first realm's users).

When diretctly going to the URL http://my.site.com/somerealm/ without
authenticating at http://my.site.com/, we have the following problem: If the
page http://my.site.com/somerealm/ (or it's sub pages) links a style sheets
(maybe also images?) from somewhere outside the realm , e.g.
http://my.site.com/images/..., mozilla won't load the linked resources.

The consequence is that one has to go one level up manually in order to
authenticate against the outer realm.
Netscape 4 and IE (any) behave differently. I guess they transparantly apply the
given username/password for the outer realm in order to load the linked recources.

To me, this makes total sense.

Comment 1

[Marian]

*** This bug has been marked as a duplicate of 54349 ***

Comment 2

[John Unruh]

Verified dupe.