-----------------------------
Please read the FAQ!
<http://java.apache.org/faq/>
-----------------------------
> > >Is there a recommended way to terminate a user's session from a
> > >browser? ... that reprompts with the same AuthName as before?
> I'd think it would be doable but you'd likely have to tune it for each
> browser (and do the research to get the browsers' behaviour)
Uh-oh. That means "ferggedit" doesn't it?
> - then the likely browser specific part and is so likely to be
> weird that the login screen below is a much more likely to succed
> option
Did you attach a login sample? I didn't see it. (In fact I think this list
strips them off. No?)
Does any one have a pointer to a good tutorial on this stuff?
I was all set to go from mod_auth to mod_auth_db for MySQL, but
I'm beginning to think the whole method of using browser based
security is too limited; but I don't know enough to decide, and
ultimately I need digitial certificates. What is the right way to go?.
If you'll pardon my thinking out loud a bit longer...
I have several HTML frames, each with different possible logins
(one for getting non-restricted reference data, one for private data,
and a further one for restricted updates). It seemed like a good
idea at the time, (and meets spec.), but now when I come to the
issue of timing out sessions it becomes a nightmare. Larry Singer's
code frag ...
> resp.setHeader("WWW-Authenticate", "Basic realm=\"AuthName\"");
... gets me what I asked for; but it only gets me one step further into
what seems like a horrible tangle.
Thanks for the help so far. If I can get a good technique I'll post a
FAQ answer -- I promise.
Hasan
~~~~~ HASAN BRAMWELL
Address: Casilla 17-17-1004, Quito, Ecuador Tel : (593) (2) 372-748
Internet: [EMAIL PROTECTED] or : (593) (9) 722-221
--
--------------------------------------------------------------
Please read the FAQ! <http://java.apache.org/faq/>
To subscribe: [EMAIL PROTECTED]
To unsubscribe: [EMAIL PROTECTED]
Archives and Other: <http://java.apache.org/main/mail.html>
Problems?: [EMAIL PROTECTED]