Change in 6.5 Authentication Model causing upgrade headaches

I’ve contacted technical support but was told this question is beyond their scope. I’m hoping someone else knows how to do this in 6.5. This is the final hurdle that we have to get over before we can leave our 5.7 environment behind.

The authentication model for Rhythmyx changed from basic user authentication to forms-based authentication between 5.7 and 6.5 and this has completely blown a section of our intranet out of the water. We need to re-code now that the authentication model is different.

We use AJAX on our Intranet to display content from the CMS. The way the AJAX works is that Javascript calls the Rhythmyx server to retrieve XML records regarding items that Rx has in its repository.

It all works just wonderfully in 5.7.

The AJAX uses the HTTP Object to construct a GET URL which used to use basic user authentication to log into Rx and pass the request for XML data into the Rhythmyx server.

When the SAME method is used to retrieve XML from 6.5 it redirects to the Rx login page.

Apparently there are now some sort of mysterious login cookies that need to be set in order to get the XML results from the webserver.

Our AJAX is built from instructions we got from Percussion about a year ago for 5.7. Does anyone have updated guidelines for AJAX for 6.5?

Here is how our proxy calls Rhythmyx in 5.7 (error handling and user/pass removed)
<blockquote>
Language=Javascript%

var url=“http://nindscmsprod.ninds.nih.gov:9992/Rhythmyx/QueryIndex_auto/display_Child_foldersjs.XML”;

var progIds = [’’,‘MSXML2.ServerXMLHTTP.5.0’,‘MSXML2.ServerXMLHTTP.4.0’,‘MSXML2.ServerXMLHTTP.3.0’,‘MSXML2.ServerXMLHTTP’];

var objSrvHTTP = null;
objSrvHTTP = new ActiveXObject(‘MSXML2.ServerXMLHTTP.6.0’);

objSrvHTTP.open(“GET”,url+"?"+Request.ServerVariables(“QUERY_STRING”),false,“username”,“pass”);
objSrvHTTP.send();
Response.Write(objSrvHTTP.responseText);

%>

</blockquote>
Since we can no longer send the “username” and “pass” in the objSrvHTTP.open call I really don’t know how to code this up.

I got a Python example from Percussion that I can’t figure out. I really need the XML HTTP to work.

Any ideas? Is there any way to get backward compatibility for basic user authentication? This is a show-stopper for us, if we can’t solve it we can’t go to 6.5 Rhythmyx.

Any ideas would be most appreciated, thank you.