Allow RemoteAddreValve and RemoteHostValve to
trigger authentication instead of denying a
request with a status code.

This only works in combination with preemptiveAuthentication
on the application context.

It can be used to add an additional authentication
without touching the application war.

Example:

<Context preemptiveAuthentication="true">
  <Valve className="org.apache.catalina.valves.RequestFilterValve"
         allow=".*,8009"
         addLocalPort="true"
         invalidAuthenticationWhenDeny="true"/>
  <Valve className="org.apache.catalina.authenticator.BasicAuthenticator" />
</Context>

This will allow normal access via the port 8009 connector (AJP)
but will trigger basic auth when accessed via any other connector.
An administrator can use an http port to check whether the app
works but public access will still be restricted to the AJP port.


git-svn-id: https://svn.apache.org/repos/asf/tomcat/trunk@1642595 13f79535-47bb-0310-9956-ffa450edef68