[Geoserver-users] Basic Auth changes

[Neil J. <nei...@ho...>]

Hi all,
I am having a problem accessing the WMS service on the GWC that is packaged with Geoserver 2.2, but I think the issue is more general...
My WMS requests are being forwarded by a proxy rewrite rule from the main web server.Unfortunately in doing this it seems that basic authentication header information (the ldap credentials in this case) are being passed on as well.
In the authentication settings in geoserver, 'basic' ,by default, is higher up the list than 'anonymous', so the credentials that are provided are tested and fail even though I don't really want any authentication test for a map tile!
The symptom is that if a GWC/WMS (and probably a WMS) request are made directly to the geoserver, the tile(s) are supplied no problem.As soon as the request is redirected via the proxy rule on my website server, the authentication fails (unless of course, by sheer conincidence, there happens to be a geoserver account with identical credentials)
I think the easiest thing to do would be to remove basic from the REST and  GWC request chain, or at least move it below anonymous, but I cannot save any change that I make to these settings via the web interface. No changes are retained when I click on save.
Is there a way I can configure this via the XML instead or am I barking up the wrong tree entirely?
Help!
Neil