Andrew, The AuthenticationViaForm class does some basic "guessing" for defaults if nothing is provided. If you start to override stuff, I think the following needs to be set:
formObjectClass formObjectName Hope that helps. -Scott On Jan 3, 2008 2:27 PM, Andrew R Feller <[EMAIL PROTECTED]> wrote: > Hey Scott, > > > > While looking into the UsernamePasswordCredentialsValidator, we > encountered an issue with the initAction method of > AuthenticationViaFormAction class. We were setting the validator property > via Spring, however it was being overwritten by the default > UsernamePasswordCredentialsValidator class. Looking at the code in > AuthenticationViaFormAction, it appears that the validator is overridden if > the form object class isn't set. > > > > Is this the correct behavior? > > > > Andrew R Feller, Analyst > > University Information Systems > > 200 Fred Frey Building > > Louisiana State University > > Baton Rouge, LA, 70803 > > (225) 578-3737 (office) > ------------------------------ > > *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On > Behalf Of *Andrew R Feller > *Sent:* Tuesday, December 18, 2007 10:06 AM > *To:* Yale CAS mailing list > *Subject:* RE: Server side validation of login servlet form submission > > > > Scott, > > > > Thanks for the reply; that is exactly what I was looking for! > > > > Sincerely, > > Andy > > > > Andrew R Feller, Analyst > > University Information Systems > > 200 Fred Frey Building > > Louisiana State University > > Baton Rouge, LA, 70803 > > (225) 578-3737 (office) > ------------------------------ > > *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On > Behalf Of *Scott Battaglia > *Sent:* Tuesday, December 18, 2007 9:51 AM > *To:* Yale CAS mailing list > *Subject:* Re: Server side validation of login servlet form submission > > > > Andrew, > > > > Out of the box CAS provides a UsernamePasswordValidator (which implements > Spring's Validator interface). You can replace our default with your own > custom validator (you can plug it into the AuthenticationViaForm as a > dependency). > > > > -Scott > > On Dec 18, 2007 10:37 AM, Andrew R Feller <[EMAIL PROTECTED]> wrote: > > Hey everybody, > > > > Due to a past of poor choices, we have to deal with denying users logging > in with particular username formats such as email address. What is the > recommended way to handle this scenario? > > > > Thanks, > > > > Andrew R Feller, Analyst > > University Information Systems > > 200 Fred Frey Building > > Louisiana State University > > Baton Rouge, LA, 70803 > > (225) 578-3737 (office) > > > > > _______________________________________________ > Yale CAS mailing list > [email protected] > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > -- > -Scott Battaglia > > LinkedIn: http://www.linkedin.com/in/scottbattaglia > > _______________________________________________ > Yale CAS mailing list > [email protected] > http://tp.its.yale.edu/mailman/listinfo/cas > > -- -Scott Battaglia LinkedIn: http://www.linkedin.com/in/scottbattaglia
_______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
