RE: j_security_check question

2002-07-03 Thread John Gregg
Hmmm. Your auth constraint protects the login.jsp itself. Try changing that so the login.jsp is not protected. Maybe you have a chicken and egg problem. john -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]. org]On Behalf Of Kevin Andryc Sent: Wednesday, July 03,

RE: j_security_check question

2002-07-02 Thread John Gregg
Is CustomLogin a resource at a protected URL, or is it a servlet that itself spits out a login page? You can't access j_security_check directly. Instead, you need to access a protected URL, the container sees that you're not logged-in and redirects you to the login form, you submit the login

RE: j_security_check question

2002-07-02 Thread John Gregg
No can do-ski. The container needs to know where to send the user upon successful authentication, but if your application presents a form to a user that gets submitted to j_security_check, the Tomcat authentication stuff won't know where to send the user when the operation completes. Your

RE: Design Question: Static vs. Dynamic

2002-06-24 Thread John Gregg
I read somewhere that Yahoo does it half and half. That is, the pages they serve are technically static, but they're regenerated as often as new content, like a news story, becomes available. john -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]. org]On Behalf Of

RE: Null Pointer Exception - would you please take a look?

2002-06-18 Thread John Gregg
First, back-off. Yeah, maybe some people aren't reading your e-mails carefully, but some of us are supposed to be billing clients and not answering your e-mails. Second, an introduction to the art of reading stack traces. There's no problem loading your driver. If there had been, you would be

RE: [offtopic] IDE for Tomcat?

2002-06-14 Thread John Gregg
I agree. You don't need $3000 IDEs. I use UltraEdit + JSwat + Ant + WinCVS. Total cost: $30. Make sure to take advantage of the configurable tools in your editor, if it has any. I can launch Tomcat, Postgres, JUnit, and compile, run, clean, you name it all from within UltraEdit. Some of my

front controller pattern and security

2002-06-13 Thread John Gregg
Hi all. I've been thinking about how the j2ee front controller pattern (used by Struts et al.) does/does not take advantage of url-based authorization constraints in web.xml. I want to avoid having to check roles in my own code as much as possible. At first I thought I could declare a URL like

RE: driver manager does not work neither giving error

2002-06-12 Thread John Gregg
I don't think Tomcat will recognize classes12.zip no matter where you put it. Rename it to classes12.jar and place it under tomcat-homewebapps/project/web-inf/lib, tomcat-home/lib, or tomcat-home/common/lib. If Tomcat can't find the driver class, I'd expect a ClassNotFoundException in your

RE: Storing Java Objects in SQL

2002-06-12 Thread John Gregg
It's not so simple. setObject() only works if the object is an instance of a java class that maps nicely to whatever SQL type is the type of the column you're trying to set (e.g., java.lang.String -- VARCHAR). You can't just call setObject() on any java object and expect it to work. Unless you

SOLVED: jdk 1.4 and Oracle drivers

2002-06-11 Thread John Gregg
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]. org]On Behalf Of John Gregg Sent: Thursday, June 06, 2002 4:53 PM To: [EMAIL PROTECTED] Subject: jdk 1.4 and Oracle drivers Hi all. Upon completing my most recent project I switched from jdk 1.3.1 to 1.4. However now I can't start Tomcat (4.0.1

jdk 1.4 and Oracle drivers

2002-06-06 Thread John Gregg
Hi all. Upon completing my most recent project I switched from jdk 1.3.1 to 1.4. However now I can't start Tomcat (4.0.1) because it can't find the Oracle jdbc driver class. When I first started using Oracle with Tomcat, I renamed the classes12.zip to classes12.jar. Now no matter where I put

RE: Form-Based-Authentication with Tomcat 4.0.1

2002-04-10 Thread John Gregg
Hello all. I'm a little surprised how uncommon this problem seems to be on the list. Anyway, I'll tell you what I know and what to do about it. Until now we've been using a protected index.html page as the entrypoint for our app. However, we've had the same problem Frank had. Upon starting