yes sure there might be easier ways then writing a servlet, especially if there are only little amount of users which have to be handled through that.
i mostly auth against a database, to get a access to database I use some Java OR-mapping layers. I havn't tested hibernate yet but i do not expect to behave different then any other servlet container.
that's why i suggested it.
But I have not experience with acegi ... Somebody knows:
Does it run well with hibernate, can it be integrated?
Hope Red5 will come with a simple example of acegi, cause the tutorial looks quite long:
http://home.hccnet.nl/bart.van.riel/SpringAcegiTutorial/HTML/SpringAcegiTutorial-1_1-html.html
And it start with the word:
*Configuration of Acegi is a complex task* :-)
Is acegi another kind of *Session-handler*? So i will not have to take care of *tokens* i will have to send around to verify people?


regards
sebastian wagner


--
Sebastian Wagner
http://www.webbase-design.de
http://www.laszlo-forum.de
Bleichstraße 92
75173 Pforzheim
Tel.: 0177-7341829
Home: 07231-417456
[EMAIL PROTECTED]

2006/9/23, Dan Rossi <[EMAIL PROTECTED]>:
Sascha wrote:
> about usermanagment and rights i thought i would wait untill the
> security engine is build into red5
>
is it planned ?

> to see if the acegi could be also used with applications if not i had
> choosen to use JUM
>
> http://www.os-kit.org/jum/
>
> for handling access...
>
This is a permissions based authentication framework for user based
management right ? Thats a bit far stretched from the topic i think ?

> @ dan about your solution, what would u like to prevent?
> wrong access?
>

Blocking hosts, or blocking all and allowing some isnt that what the
topic is about ?

> imagine this:
> 2 users using the same proxy
> so having the same ip, how would you handle that if one has access
> rights the otherone not?
>
>

that would be a question for the developers i guess, there is usually
obtainable headers like x htttp forwarded for etc if proxies actually
send that, so whatever ip is obtained from red5 is what we have to work
with i guess ?



_______________________________________________
Red5 mailing list
[email protected]
http://osflash.org/mailman/listinfo/red5_osflash.org


_______________________________________________
Red5 mailing list
[email protected]
http://osflash.org/mailman/listinfo/red5_osflash.org

Reply via email to