RE: Form Based Authentication

2005-10-11 Thread Frank W. Zammetti
gt;> -Original Message- >> From: Caldarale, Charles R [mailto:[EMAIL PROTECTED] >> Sent: 11 October 2005 17:23 >> To: Tomcat Users List >> Subject: RE: Form Based Authentication >> >> > From: Peter Bright [mailto:[EMAIL PROTECTED] >> > Subjec

RE: Form Based Authentication

2005-10-11 Thread Peter Bright
> -Original Message- > From: Caldarale, Charles R [mailto:[EMAIL PROTECTED] > Sent: 11 October 2005 17:23 > To: Tomcat Users List > Subject: RE: Form Based Authentication > > > From: Peter Bright [mailto:[EMAIL PROTECTED] > > Subject:

RE: Form Based Authentication

2005-10-11 Thread Caldarale, Charles R
> From: Peter Bright [mailto:[EMAIL PROTECTED] > Subject: RE: Form Based Authentication > > > > > > > It's point (c) that's proving problematic; there's no way to > > > reauthenticate that I can see. > > > > What happens if you

RE: Form Based Authentication

2005-10-11 Thread Peter Bright
> -Original Message- > From: Caldarale, Charles R [mailto:[EMAIL PROTECTED] > Sent: 11 October 2005 17:18 > To: Tomcat Users List > Subject: RE: Form Based Authentication > > > From: Peter Bright [mailto:[EMAIL PROTECTED] > > Subject: Form Based Authenti

RE: Form Based Authentication

2005-10-11 Thread Caldarale, Charles R
> From: Peter Bright [mailto:[EMAIL PROTECTED] > Subject: Form Based Authentication > > It's point (c) that's proving problematic; there's no way to > reauthenticate that I can see. What happens if you just invalidate the existing session? - Chuck

Form Based Authentication

2005-10-11 Thread Peter Bright
Hello, We're currently using form-based authentication (i.e. FORM) but, as I suspect many people have found, it's rather limited. One requirement we have is enforced password changes in certain scenarios. Currently the approach we were thinking of using is as follows: a)

Re: Reg form based authentication

2005-10-02 Thread sree kanth
thank you all Sreekanth On 10/1/05, Mark Thomas <[EMAIL PROTECTED]> wrote: > > sree kanth wrote: > > Hi all, > > i have been developing on JSP's for the last one year,but still i have > never > > implemented form based authentication. > > Can any one hel

Re: Reg form based authentication

2005-10-01 Thread Mark Thomas
sree kanth wrote: Hi all, i have been developing on JSP's for the last one year,but still i have never implemented form based authentication. Can any one help me in implenting form based authentication? Thank you all Sreekanth Very basic example: Put login.jsp and error.jsp in the root of

Re: combining form based authentication with https

2005-10-01 Thread Mark Thomas
Peddireddy Srikanth wrote: Hi all, I have a basic doubt If there are any resoursec which will me on this please point me towards them. I will carry on from there. My question is how to combine the form based authentication, where we use "jsecuritycheck" , "jusername" etc w

Re: Reg form based authentication

2005-09-30 Thread Peddireddy Srikanth
r > implemented form based authentication. > Can any one help me in implenting form based authentication? > Thank you all > Sreekanth > > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Reg form based authentication

2005-09-30 Thread sree kanth
Hi all, i have been developing on JSP's for the last one year,but still i have never implemented form based authentication. Can any one help me in implenting form based authentication? Thank you all Sreekanth

combining form based authentication with https

2005-09-29 Thread Peddireddy Srikanth
Hi all, I have a basic doubt If there are any resoursec which will me on this please point me towards them. I will carry on from there. My question is how to combine the form based authentication, where we use "jsecuritycheck" , "jusername" etc with https. As far as I know

Re: Mixing Form-based authentication with Public Resources

2005-09-20 Thread Tim Funk
No solution. You can filter prefix, or suffix, but not both. -Tim Marquez, Omar wrote: Hi, Im using Tomcat Form-based Authentication with a JDBC realm, this is working ok for all my pages that are protected trough web.xml with All System *.do *.jsp

Mixing Form-based authentication with Public Resources

2005-09-20 Thread Marquez, Omar
Hi, Im using Tomcat Form-based Authentication with a JDBC realm, this is working ok for all my pages that are protected trough web.xml with All System *.do *.jsp sys_user NONE however, now I have a set of pages, report*.jps and

login form based authentication

2005-08-29 Thread Jun Zhu
My web application uses tomcat 5.5.10. By using basic authentication, the application works fine. By using the form based authentication, if I submit a invalidate username/password, appication seems worked, a error.jsp was showed up. But if I submit a valid username/password, I got a "

URLConnection and form based authentication (j_username)

2005-07-27 Thread Anthony Smith
I cannot get this to work. It works for all other sites besides ones that have j_username & j_password. It always comes back to the login page. I see other messageboards via google that have the same problem, but there is no answer. Username: Password: Anthony Smith P

Form Based Authentication

2005-05-12 Thread David B. Saul
Having a problem being challenged on Linux. Form based using the tomcat-users.xml file works under windows. However, when same code is deployed to Linux the page is never challenged. I checked server.xml on both platforms as well as the specific webapp. Even built a Hello World example to elimin

RE: Form Based Authentication

2005-05-12 Thread David B. Saul
Never Mind - It was permissions on the tomcat-users.xml file. Duh! -Original Message- From: David B. Saul [mailto:[EMAIL PROTECTED] Sent: Thursday, May 12, 2005 7:37 PM To: 'Tomcat Users List' Subject: Form Based Authentication Having a problem being challenged on Linux.

RE : Form Based Authentication

2005-05-11 Thread LERBSCHER Jean-Pierre
forward or redirect on login page). -Message d'origine- De : Wade Chandler [mailto:[EMAIL PROTECTED] Envoyé : mercredi 11 mai 2005 07:10 À : Tomcat Users List Objet : Re: Form Based Authentication Wade Chandler wrote: > I have form based authentication working. But, I need the log

Re: Form Based Authentication

2005-05-10 Thread Wade Chandler
Wade Chandler wrote: I have form based authentication working. But, I need the login form to be a little more dynamic. For instance, I want to use different forms for different areas and not always use the same form. Is this possible? For instance, under one site I want to limit URLs to

Form Based Authentication

2005-05-10 Thread Wade Chandler
I have form based authentication working. But, I need the login form to be a little more dynamic. For instance, I want to use different forms for different areas and not always use the same form. Is this possible? For instance, under one site I want to limit URLs to different logins. I

Re: basic or form based authentication not working

2005-01-20 Thread Ashish Kulkarni
T), Ashish > Kulkarni > <[EMAIL PROTECTED]> wrote: > > Hi > > i am using tomcat5.0.28 and trying to setup basic > or > > form based authentication, and it is just not > working, > > > > following is the information in web.xml > > > > >

Re: basic or form based authentication not working

2005-01-20 Thread Omar Adobati
can you show haow you set up the for this webapp? On Thu, 20 Jan 2005 11:49:02 -0800 (PST), Ashish Kulkarni <[EMAIL PROTECTED]> wrote: > Hi > i am using tomcat5.0.28 and trying to setup basic or > form based authentication, and it is just not working, > > following

basic or form based authentication not working

2005-01-20 Thread Ashish Kulkarni
Hi i am using tomcat5.0.28 and trying to setup basic or form based authentication, and it is just not working, following is the information in web.xml secure download maps software /pages/download/* /download/* GET POST admin NONE FORM Form

form-based authentication with dynamically computed credentials

2005-01-10 Thread Charlton_Rose
I wish to use form-based authentication that accepts users with the following credentials: username = any string (ex.: "test") password = length of username (ex: "4") This is a silly security system, I admit. However, a solution to this problem will help me to sol

Re: FORM based authentication config

2004-12-21 Thread Viorel C.
On Tue, 2004-12-21 at 16:15, Chris Chappell wrote: > Hi I'm having trouble getting form based authentication to work. Any help > much appreciated. > I'm missing something simple I'm sure. (TC 5.0.19, W2K, Mysql4) > > I am using a JDBC Realm which works fine with B

Re: FORM based authentication config

2004-12-21 Thread Chris Chappell
tor cannot forward to say the error page Chris - Original Message - From: "Goel, Manish Kumar" <[EMAIL PROTECTED]> To: "Tomcat Users List" <[EMAIL PROTECTED]> Sent: Tuesday, December 21, 2004 2:26 PM Subject: RE: FORM based authentication config Hi,

RE: FORM based authentication config

2004-12-21 Thread Goel, Manish Kumar
Hi, see this this might help you http://www.webservertalk.com/message633890.html cheers Manish -Original Message- From: Chris Chappell [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 21, 2004 7:45 PM To: Tomcat Users List Subject: FORM based authentication config Hi I'm h

FORM based authentication config

2004-12-21 Thread Chris Chappell
Hi I'm having trouble getting form based authentication to work. Any help much appreciated. I'm missing something simple I'm sure. (TC 5.0.19, W2K, Mysql4) I am using a JDBC Realm which works fine with BASIC auth. After changing to FORM and try http://127.0.0.1:8080/MyApp/sec

RE: Form Based Authentication with Cookies?

2004-10-12 Thread Chris Ward
E OR DISTRIBUTION OF THE MATERIAL IN THIS E-MAIL IS STRICTLY FORBIDDEN. HORIZON ASSET LIMITED IS AUTHORISED AND REGULATED BY THE FINANCIAL SERVICES AUTHORITY. > -Original Message- > From: Chris Forbis [mailto:[EMAIL PROTECTED] > Sent: Tuesday, October 12

Form Based Authentication with Cookies?

2004-10-12 Thread Chris Forbis
I have been looking for a way withing tomcat using a JDBCRealm to do form bases authentication and allow users to set some sort of "Remember Me" cookie, so they do not need to log into my application more than once a month or so. It looks like to me that FormAuthenticator is sort of hardcoded into

RE: Tomcat Compiling Error - Form Based Authentication

2004-10-04 Thread Dale, Matt
arian; Tomcat Users List Subject: Re: Tomcat Compiling Error - Form Based Authentication I have to give u a bad news. What i said yesterday night was wrong. I have the same error also putting tools.jar (the JDK 1.5 ones)... so I'm in trouble again! Omar - Original Message - From: &quo

Re: Tomcat Compiling Error - Form Based Authentication

2004-10-04 Thread Omar Adobati
7;" <[EMAIL PROTECTED]> Sent: Sunday, October 03, 2004 9:53 PM Subject: RE: Tomcat Compiling Error - Form Based Authentication Hi Omar, You should install the entire new JDK. Having 1 jar file from 1 version of the JDK and all the other JAR files from another version could cause a lot of pr

Re: Tomcat Compiling Error - Form Based Authentication

2004-10-03 Thread Omar Adobati
st" <[EMAIL PROTECTED]> Sent: Sunday, October 03, 2004 9:11 PM Subject: Re: Tomcat Compiling Error - Form Based Authentication I hope you've right. Tomorrow i'll do it and write here if it works... thx a lot - Original Message - From: "John Najarian" &

Re: Tomcat Compiling Error - Form Based Authentication

2004-10-03 Thread Omar Adobati
ckward compatible. It maybe the tools.jar files aren't compatible. If you can get jdk 1.5 and tomcat 5.28 for Linux download, install them and rebuild your app. -Original Message- From: Omar Adobati [mailto:[EMAIL PROTECTED] Sent: Sunday, October 03, 2004 11:50 AM To: Tomcat Users

RE: Tomcat Compiling Error - Form Based Authentication

2004-10-03 Thread John Najarian
't compatible. If you can get jdk 1.5 and tomcat 5.28 for Linux download, install them and rebuild your app. -Original Message- From: Omar Adobati [mailto:[EMAIL PROTECTED] Sent: Sunday, October 03, 2004 11:50 AM To: Tomcat Users List Subject: Re: Tomcat Compiling Error - Form Based

Re: Tomcat Compiling Error - Form Based Authentication

2004-10-03 Thread Omar Adobati
n't hurt or take much time. -Original Message- From: Omar Adobati [mailto:[EMAIL PROTECTED] Sent: Sunday, October 03, 2004 11:25 AM To: Tomcat Users List Subject: Re: Tomcat Compiling Error - Form Based Authentication Tomcat: 5.0.18 JDK & jre: 1.4.2 O.S.: Linux ther's anything wr

RE: Tomcat Compiling Error - Form Based Authentication

2004-10-03 Thread John Najarian
mar Adobati [mailto:[EMAIL PROTECTED] Sent: Sunday, October 03, 2004 11:25 AM To: Tomcat Users List Subject: Re: Tomcat Compiling Error - Form Based Authentication Tomcat: 5.0.18 JDK & jre: 1.4.2 O.S.: Linux ther's anything wrong? - Original Message - From: "John Najarian&

Re: Tomcat Compiling Error - Form Based Authentication

2004-10-03 Thread Omar Adobati
Tomcat: 5.0.18 JDK & jre: 1.4.2 O.S.: Linux ther's anything wrong? - Original Message - From: "John Najarian" <[EMAIL PROTECTED]> To: "'Tomcat Users List'" <[EMAIL PROTECTED]> Sent: Sunday, October 03, 2004 8:07 PM Subject: RE: Tomcat Co

RE: Tomcat Compiling Error - Form Based Authentication

2004-10-03 Thread John Najarian
rs List Subject: Re: Tomcat Compiling Error - Form Based Authentication I don't think it was a permission problem on the webapps application 'couse all other still work good and have the same permissions settings as this one that gives troubles. This is the permission on tools.jar, I

Re: Tomcat Compiling Error - Form Based Authentication

2004-10-03 Thread Omar Adobati
:[EMAIL PROTECTED] Sent: 03 October 2004 16:35 To: Tomcat Users List Subject: Tomcat Compiling Error - Form Based Authentication Sorry Matt, the log was changeing. Now it show just this instead off the error that cant compile... why? I'm still usinf form-based authentication and the webapp i

RE: Tomcat Compiling Error - Form Based Authentication

2004-10-03 Thread Dale, Matt
List Subject: Tomcat Compiling Error - Form Based Authentication Sorry Matt, the log was changeing. Now it show just this instead off the error that cant compile... why? I'm still usinf form-based authentication and the webapp in a localmachine with WinXP + Tomcat worls good but gives this pr

Tomcat Compiling Error - Form Based Authentication

2004-10-03 Thread Omar Adobati
Sorry Matt, the log was changeing. Now it show just this instead off the error that cant compile... why? I'm still usinf form-based authentication and the webapp in a localmachine with WinXP + Tomcat worls good but gives this problem on a server with Linux RH plus Tomcat. (Tomcat is the

Re: [SOLVED] basic FORM-based authentication failing

2004-09-10 Thread Fred Blaise
Awful typo... works much better when j_user_name is spelled j_username Issue resolved. Thanks. fb. Quoting Fred Blaise <[EMAIL PROTECTED]>: > Hello all > > I have been trying to set up FORM based authentication, but it only works > half-way. > When I try to get to t

basic FORM-based authentication failing

2004-09-10 Thread Fred Blaise
Hello all I have been trying to set up FORM based authentication, but it only works half-way. When I try to get to the protected resource, it sends me to the login page: good. If I authenticate incorrectly, then it sends me to the login error page: good. If I authenticate _correctly_, it also

Bug in Form Based Authentication? (v5.0.25)

2004-09-08 Thread Jon Wilmoth
om does not use authentication.  The second app deployed to a subdomain of www.mydomain.com (i.e. dev.mydomain.com) is deployed with FORM based authentication.  Tomcat correctly presents the login page when an attempt to access a protected URI is made with the second app.  Unfortunately after submi

Re: Form based authentication - "last login"

2004-09-03 Thread QM
On Fri, Sep 03, 2004 at 10:08:59AM +0200, [EMAIL PROTECTED] wrote: : IMHO the best sollution would be to intercept the authentication process (I'm working with Tomcat 4.x), to smuggle some custom code there that updates the appropriate column in the database. The question is.. how can I do this??

Form based authentication - "last login"

2004-09-03 Thread hicnar
Hi All, I'm supposed to record the last login timestamp. IMHO the best sollution would be to intercept the authentication process (I'm working with Tomcat 4.x), to smuggle some custom code there that updates the appropriate column in the database. The question is.. how can I do this?? Or maybe s

Re: How does Tomcat manage Form-based authentication?

2004-04-02 Thread Chris Egolf
en [mailto:[EMAIL PROTECTED] Sent: Friday, April 02, 2004 10:12 AM To: Tomcat Users List Subject: Re: How does Tomcat manage Form-based authentication? I'm using an old nuts and bolts programme that actually programmatically sent the "Authorization" header string for BASIC authorizat

Re: How does Tomcat manage Form-based authentication?

2004-04-02 Thread Malcolm Warren
as cookie or as query parameter) -Original Message- From: Malcolm Warren [mailto:[EMAIL PROTECTED] Sent: Friday, April 02, 2004 10:12 AM To: Tomcat Users List Subject: Re: How does Tomcat manage Form-based authentication? I'm using an old nuts and bolts programme that actually programmatically sent t

RE: How does Tomcat manage Form-based authentication?

2004-04-02 Thread Ralph Einfeldt
10:12 AM > To: Tomcat Users List > Subject: Re: How does Tomcat manage Form-based authentication? > > I'm using an old nuts and bolts programme that actually > programmatically sent the "Authorization" header string > for BASIC authorization, and I'd like to

Re: How does Tomcat manage Form-based authentication?

2004-04-02 Thread Malcolm Warren
Thank you for your answer. Sorry about the new thread for new topic business - I hadn't understood the thread mechanism. I presume for this topic I'd better continue as we are and I'll get it right next time. I was wondering exactly how the servlet container knows whether the user has already a

RE: How does Tomcat manage Form-based authentication?

2004-04-01 Thread Martin Alley
PROTECTED] Sent: 01 April 2004 15:39 To: Tomcat Users List Subject: How does Tomcat manage Form-based authentication? With BASIC authorization, which I used to use, the browser was sent an "Authorization" header. This doesn't happen with FORM-based authorization. I believe Tomcat deals w

Re: How does Tomcat manage Form-based authentication?

2004-04-01 Thread QM
On Thu, Apr 01, 2004 at 04:38:49PM +0200, Malcolm Warren wrote: : With BASIC authorization, which I used to use, the browser was sent an : "Authorization" header. : : This doesn't happen with FORM-based authorization. : I believe Tomcat deals with it all, but how? Anybody know? Not sure I unders

How does Tomcat manage Form-based authentication?

2004-04-01 Thread Malcolm Warren
With BASIC authorization, which I used to use, the browser was sent an "Authorization" header. This doesn't happen with FORM-based authorization. I believe Tomcat deals with it all, but how? Anybody know? - To unsubscribe, e-mail

Re: post data through form based authentication example?

2004-03-29 Thread Adam Hardy
ervation... Thanks Martin -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: 29 March 2004 09:17 To: Tomcat Users List Subject: Re: post data through form based authentication example? Hmm. You're right. I just tested it on my JBoss (running 3.2.4RC1 with tomcat 5.0.

RE: post data through form based authentication example?

2004-03-29 Thread Martin Alley
04 09:17 To: Tomcat Users List Subject: Re: post data through form based authentication example? Hmm. You're right. I just tested it on my JBoss (running 3.2.4RC1 with tomcat 5.0.19) and I got the same effect. Rats! This is not good. Trying to get info out of JBoss is like trying to get b

Re: post data through form based authentication example?

2004-03-29 Thread Adam Hardy
t' Subject: RE: post data through form based authentication example? The updated web.xml below now correctly lists the required security-role tags, but the only effect was to bring the form.html resource into the secured area (ie login is requested before accessing this page now), so I hav

RE: post data through form based authentication example?

2004-03-28 Thread Martin Alley
After further testing, I believe this is a bug specific to the JBoss environment (both 3.2.3 and 3.2.4RC1) Martin -Original Message- From: Martin Alley [mailto:[EMAIL PROTECTED] Sent: 28 March 2004 15:24 To: 'Tomcat Users List' Subject: RE: post data through form based auth

RE: post data through form based authentication example?

2004-03-28 Thread Martin Alley
age- From: Martin Alley [mailto:[EMAIL PROTECTED] Sent: 27 March 2004 09:47 To: 'Tomcat Users List' Subject: RE: post data through form based authentication example? I forgot to mention it's behaviour!! Basically when the is no security constraint, it works. When there is a securi

RE: post data through form based authentication example?

2004-03-27 Thread Martin Alley
Users List' Subject: RE: post data through form based authentication example? Hi Adam, I've put together a simple test for posting to a secured resource which seems to throw up a problem. Included files are the web app. Based on JBoss3.2.3 embedded tomcat4.1. Martin Index.html

RE: post data through form based authentication example?

2004-03-27 Thread Martin Alley
ml http://www.jboss.org/j2ee/dtd/jboss-web_3_0.dtd";> java:/jaas/authtest -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: 25 March 2004 15:10 To: Tomcat Users List Subject: Re: post data through form based authentication example? Mar

RE: post data through form based authentication example?

2004-03-25 Thread Martin Alley
ley wrote: > Hi, > > Has any one got an example of a servlet secured with form based > authentication, where the request to the servlet is posted, from outside > the secured area? > > My actual situation is I already have a web application with form based > auth working fine, b

Re: post data through form based authentication example?

2004-03-25 Thread Adam Hardy
servlet secured with form based authentication, where the request to the servlet is posted, from outside the secured area? My actual situation is I already have a web application with form based auth working fine, but I have a problem when the user is at a web form, about to post the data when their

post data through form based authentication example?

2004-03-25 Thread Martin Alley
Hi, Has any one got an example of a servlet secured with form based authentication, where the request to the servlet is posted, from outside the secured area? My actual situation is I already have a web application with form based auth working fine, but I have a problem when the user is at a web

RE: form-based authentication question

2004-03-23 Thread Koes, Derrick
: '[EMAIL PROTECTED]' Subject: form-based authentication question Using Tomcat 4.1.X, I'm attempting to switch a web app from basic auth to form-based. I'm having difficulty in one area. After creating the new form and posting to j_security_check, I wish to GET my "welc

form-based authentication question

2004-03-23 Thread Koes, Derrick
Using Tomcat 4.1.X, I'm attempting to switch a web app from basic auth to form-based. I'm having difficulty in one area. After creating the new form and posting to j_security_check, I wish to GET my "welcome" page. It appears to be doing this from the URL in the address bar, but the page looks e

double submit in form-based authentication throws IllegaStateException

2004-03-19 Thread Andrigo Spall Gomes
Hello! I sent this mail to the dev list some days ago but got no answer. I apologize for the cross-posting. Hopefully someone will be able to help me here. I'm having a problem when trying to cope with double submits in a page with form-based authentication in Tomcat 4

Form based authentication

2004-03-02 Thread Edd Dawson
Hi I have successfully set up tomcat to protect various parts of my application using JDBCrealm and form-based-authentication, and it all works fine. Now i have written a system whereby new users can register and it creates them their chosen username and puts them in the right roles in the

Form-based authentication question

2004-03-01 Thread Edd Dawson
Hi I have successfully set up tomcat to protect various parts of my application using JDBCrealm and form-based-authentication, and it all works fine. Now i have written a system whereby new users can register and it creates them their chosen username and puts them in the right roles in the

Re: Form Based Authentication - Registration

2004-02-14 Thread Adam Hardy
On 02/14/2004 10:31 AM Alexander F. Hartner wrote: No we want to add registration and have the following happen 1.) Customer requests access to a realm 2.) Redirect to login page 3.) Customer doesn't have an account yet and accesses registration page 4.) Customer registers 5.) On successful regist

Form Based Authentication - Registration

2004-02-14 Thread Alexander F. Hartner
We have form based authentication working as follows : 1.) Customer requests access to a realm 2.) Redirect to login page 3.) Customer authenticates 4.) Customer redirected to realm as original request No we want to add registration and have the following happen 1.) Customer requests access to a

Form Based Authentication - Registration

2004-02-10 Thread Alexander F. Hartner
We have form based authentication working as follows : 1.) Customer requests access to a realm 2.) Redirect to login page 3.) Customer authenticates 4.) Customer redirected to realm as original request No we want to add registration and have the following happen 1.) Customer requests access to a

RE: FORM based authentication referer

2004-01-21 Thread Guy Rouillier
Ricardo García wrote: > Here's some starting context for my question > > I have a war file that has been configured to use FORM based > authentication. I have set the in the > web.xml of the war file to point to a jsp file in my war > file. When a user invokes any j

FORM based authentication referer

2004-01-21 Thread Ricardo García
Here's some starting context for my question I have a war file that has been configured to use FORM based authentication. I have set the in the web.xml of the war file to point to a jsp file in my war file. When a user invokes any jsp without being logged in the login jsp is disp

RE: Form based authentication

2003-11-28 Thread Patrick Willart
Users List Subject: Form based authentication Hi all, I thought I would share some of my experiences with JDBCRealm authentication. First what I wanted to do was see if JDBCRealm based authentication even worked. All I got was Tomcat quitting. My first problem was that my web.xml file wasn'

Form based authentication

2003-11-28 Thread Atreya Basu
Hi all, I thought I would share some of my experiences with JDBCRealm authentication. First what I wanted to do was see if JDBCRealm based authentication even worked. All I got was Tomcat quitting. My first problem was that my web.xml file wasn't in the right order. I went to BEA's website

Form Based Authentication not redirecting to URL with IE

2003-11-12 Thread Ramesh
Hi, I am using: tomcat 4.1.18 Using Form Based Authentication with JDBCRealm FORM JDBCRealm /login.jsp /login.jsp When I try a URL like: /something.do?id=1 it goes to the login.jsp authenticates and then goes to /index.jsp instead of /something.do?id=1 This behaviour only happens

Re: FORM based authentication pages

2003-11-12 Thread Christopher Schultz
Ricardo, Is there a way to put those two pages in a location that is accessible by any context? If there is, how do I setup my web.xml file? You want the login pages for every webapp to look the same? If that's what you really want to do, I think you'll have to use symbolic links on the filesyste

Re: FORM based authentication pages

2003-11-12 Thread Tim Funk
#x27;ve found myself replicating login and error pages in every context I want to protect. The problem is that the path that point to the pages in the tag in the web.xml file of the context is relative to the context. FORM Form-Based Authentication Area

FORM based authentication pages

2003-11-12 Thread Ricardo García
FORM Form-Based Authentication Area /auth/login.html /auth/error.html Is there a way to put those two pages in a location that is accessible by any context? If there is, how do I setup my web.xml

Example form-based authentication

2003-11-08 Thread cyril vidal
Hi, I'm under Tomcat/4.1.18-LE-jdk14 and just have tested form based example. Unfortunately, when I access http://localhost:8080/examples/jsp/security/protected/index.jsp i'm well redirected to login.jsp as mentionned in web.xml /jsp/security/protected/login.jsp /jsp/security

mozilla nightly build and tomcat form-based authentication

2003-11-06 Thread Adam Hardy
Is anybody else out there using a Mozilla nightly build? Seems they've introduced a bug since the last major release (1.5) that stops me logging in using form-based authentication. It would cool if anybody else affected here would vote for the bug on bugzilla: http://bugzilla.mozill

Re: TC5 ssl form-based authentication & mozilla

2003-10-15 Thread Adam Hardy
7;t have broadband I can bundle it without the jars too. Sometimes the ssl form-based authentication loops on the login page, and sometimes it gives the "invalid direct reference" error. As mentioned above, the non-SSL normal form-based login works fine. In IE6 it works fine too. Rgds

Re: TC5 ssl form-based authentication & mozilla

2003-10-15 Thread Remy Maucherat
Adam Hardy wrote: I have set this up with the minimum configuration possible to try to find the problem. 1 JSP, one Struts action mapping, 1 servlet mapping, and the tomcat realm - no SSO, no filters, no templates, no SSL-redirection. With this security: SSL 4 Login /login.do

TC5 ssl form-based authentication & mozilla

2003-10-14 Thread Adam Hardy
I have set this up with the minimum configuration possible to try to find the problem. 1 JSP, one Struts action mapping, 1 servlet mapping, and the tomcat realm - no SSO, no filters, no templates, no SSL-redirection. With this security: SSL 4 Login /login.do use

Re: manager.xml: cannot configure SSL for form-based authentication

2003-10-14 Thread Adam Hardy
On 10/14/2003 08:41 AM Bill Barker wrote: "Adam Hardy" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] Basically it always stays in non-SSL protocol. I posted this in bugzilla, being confident that tomcat was not doing what it was supposed to, but apparently it is. I got the following

Re: manager.xml: cannot configure SSL for form-based authentication

2003-10-13 Thread Bill Barker
#x27;s comments in BZ. Unless there is a last-minute change in the Servlet 2.4 spec, Tomcat is working as expected. Of course the place to complain is: [EMAIL PROTECTED] > Thanks > > On 10/13/2003 02:19 PM [EMAIL PROTECTED] wrote: > [...] > > http://nagoya.apache.org/bugzilla/

cannot configure SSL for form-based authentication

2003-10-13 Thread Adam Hardy
wing solution via bugzilla, but I don't understand it! How is this telling me I should configure SSL for the manager login? Thanks On 10/13/2003 02:19 PM [EMAIL PROTECTED] wrote: [...] http://nagoya.apache.org/bugzilla/show_bug.cgi?id=23766 cannot configure SSL for form-based authe

manager.xml: cannot configure SSL for form-based authentication

2003-10-13 Thread Adam Hardy
.] > http://nagoya.apache.org/bugzilla/show_bug.cgi?id=23766 > > cannot configure SSL for form-based authentication > [...] > > > --- Additional Comments From [EMAIL PROTECTED] 2003-10-13 12:19 --- > FORM can be implemented as an internal redirection, like welcome files. As

Re: form-based authentication & session.invalidate

2003-10-12 Thread Adam Hardy
Although I've no real idea what an internal tomcat SessionEvent is, it sounds like it's a bug. Give me the word and I'll enter it in bugzilla. Adam On 10/12/2003 01:57 AM Tim Funk wrote: Hmm. I always thought that when using the SSO valve, logging out of one webapp automatically logs you out of

Re: form-based authentication & session.invalidate

2003-10-11 Thread Tim Funk
Hmm. I always thought that when using the SSO valve, logging out of one webapp automatically logs you out of all webapps. The 5 code looks broken based on *very quick* inspection compared to 4.1 based on lines 304-308. if ( event.getData() != null && "logout".equals( event.

Re: form-based authentication & session.invalidate

2003-10-11 Thread Adam Hardy
2003 06:04 PM Tim Funk wrote: Authentication information is somewhat stored in the session for form based authentication. (I can't remember the specifics) So using session.invalidate should log the user out. This works since the session id which is a cookie or URL rewriting scheme is what the browser key

Re: form-based authentication & session.invalidate

2003-10-11 Thread Tim Funk
Authentication information is somewhat stored in the session for form based authentication. (I can't remember the specifics) So using session.invalidate should log the user out. This works since the session id which is a cookie or URL rewriting scheme is what the browser keys in o

form-based authentication & session.invalidate

2003-10-11 Thread Adam Hardy
I am using session.invalidate() to try to cause the user to receive another login request, using CMS form-based authentication. I saw the same issue in bugzilla but for basic authentication: http://nagoya.apache.org/bugzilla/show_bug.cgi?id=12147 where the tomcat developer/bugzilla person

RE: [Q] Form-based authentication with DatasourceRealm

2003-07-24 Thread Andrew Liles
This is a three part problem. First you have a process that does the challenging of access. In the case of Form Based Authentication this means redirecting the user to a login page. Second you have a scheme to take the credentials the user provides and validate them. This is the job of the

[Q] Form-based authentication with DatasourceRealm

2003-07-24 Thread Riaan Oberholzer
Hi, I'm trying to use Realms for the first time. The documentation of Tomcat is pretty straight foward and everything is clear (and surprisingly simple), except how I must name the "action=???" paramaters for my form in which the authentication is done. The Tomcat example is: for a MemoryRealm

WEBDAV and FORM-Based Authentication

2003-07-10 Thread Dinh, Chinh
Does anyone know if it is possible to have a FORM-based authentication with webdav servlet (which is open as a "web folder"). I have tried, but unsuccessfully. If a servlet runs in a regular way (HTTP://), the form log-in page is displayed. However, if the webdav servlet i

Re: Auto Login Using Form Based Authentication

2003-06-11 Thread Bill Barker
I was using "mod_jk" as a short-hand for the entire server-suite. There is a Domino connector, but I don't believe that there is a binary for it. You can get the source and compile it from http://jakarta.apache.org/builds/jakarta-tomcat-connectors/jk/release/v1.2.4 /src/. Documentation is at htt

Re: Auto Login Using Form Based Authentication

2003-06-11 Thread John Turner
"mod_jk" is "strictly" for Apache, since the "mod" typically means "Apache module". But JK (AJP13) is a protocol. It can be implemented however you like. There are JK connectors for Apache and IIS, for example. John On Wed, 11 Jun 2003 10:53:37 -0400, vtobin <[EMAIL PROTECTED]> wrote: Hi Bi

  1   2   3   >