I have external auth working, but tools cannot be installed (403 forbidden) unless I turn of authentication.

If i turn on remote-auth, i have to configure the webserver to ask for credentials otherwise i get an error page.

It would make sense to have the webserver request credentials only for requests to a login page, but I don’t see how to do that.

For now I’ve just turned off remote-auth.

Brad