Interesting, thanks.  I suppose that I could take apart the source for whatever class 
implements j_security_check and try to mimic that, since it demonstrably does the 
trick.  What class is that?  The j_security_check mapping seems to happen "magically", 
as I can't find any mention of it in the various deployment descriptor files -- which 
is perhaps not surprising, given how the servlet spec describes it.
 
So, again, it sounds like my best bet is to glean ideas from whatever class implements 
the LoginContext -> session connection in j_security_check processing.  A pointer 
would be most welcome.  And thanks again for your assistance with this.

        -----Original Message----- 
        From: Scott M Stark [mailto:[EMAIL PROTECTED] 
        Sent: Thu 4/3/2003 8:14 PM 
        To: [EMAIL PROTECTED] 
        Cc: 
        Subject: Re: [JBoss-user] auth login config file from JSP
        
        

        No there is not as transparent transition from an unsecured context to a 
secured
        context is not part of the servlet specs due to the fact that integration with 
security
        infrastructures is not part of the specs.
        
        xxxxxxxxxxxxxxxxxxxxxxxx
        Scott Stark
        Chief Technology Officer
        JBoss Group, LLC
        xxxxxxxxxxxxxxxxxxxxxxxx
        
        ----- Original Message -----
        From: "Craig Berry" <[EMAIL PROTECTED]>
        To: <[EMAIL PROTECTED]>
        Sent: Thursday, April 03, 2003 4:16 PM
        Subject: RE: [JBoss-user] auth login config file from JSP
        
        
        OK, let me rephrase the question in a different way, and at a higher
        level; perhaps I'm just solving my problem the wrong way.  We would like
        to offer a seamless path for guest users to enter our application
        without ever seeing an explicit login, if they come via a particular
        unprotected servlet.  The guest user has a real account in the db which
        provides authentication info for all users.  Is there an easy way to set
        this up that I'm missing?
        
        
        
        
        -------------------------------------------------------
        This SF.net email is sponsored by: ValueWeb:
        Dedicated Hosting for just $79/mo with 500 GB of bandwidth!
        No other company gives more support or power for your dedicated server
        http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/
        _______________________________________________
        JBoss-user mailing list
        [EMAIL PROTECTED]
        https://lists.sourceforge.net/lists/listinfo/jboss-user
        

<<winmail.dat>>

Reply via email to