Re: method of implementing a 'login' section in a site

2003-09-10 Thread Schalk
Anson

I would suggest using session tracking to keep track of this state. Place the user in 
your session and have a small function run in the head of your pages checking for 
this. If no username is found then call, session.invalidate and redirect the user back 
to the login screen.

HTH

Kind Regards
Schalk
Volume4
www.volume4.co.za
Dedicated to an OpenSource World


Re: method of implementing a 'login' section in a site

2003-09-09 Thread Billy Kantartzis
The way i prefer to do it is use a simple db with the
user atributes (userid , password , etc), use cookies
to check if the user is logged in or not.

one thing i had problems with when i first implemented
this solution is that the cookies are stored in a
browser specific place and you might not be able to
access them easilly. a work round to this is to set
the cookie path yourself from a methid in the API (i
dont have it at the top of my head i will look it up)
and get the cookie reference using the location where
the cookie is stored

Billy 


--- zeallousbigpond.net.au [EMAIL PROTECTED]
wrote:
 hi, 
 
 Thanks a lot for the email guys!! Another
 question I want to ask. I 
 want to create a section of my site where I only
 allow users to use IF 
 they have logged into my site. Either than using
 cookies to keep track 
 if they have logged in or not, what method should I
 use to keep track 
 of their status on each page?
 
 Anson
 
 - Original Message -
 From: Marco Tedone [EMAIL PROTECTED]
 Date: Tuesday, September 9, 2003 10:36 am
 Subject: Re: EJB in tomcat
 
  Well, Tomcat needs to 'colloquiate' with an
 application server 
  (where EJBs
  are deployed). The answer is yes, it's possible;
 all your 
  application needs
  to do is to establish a context with an
 application server and 
  then it can
  use the component deployed on application server
 generally using a 
  lookup.
  Here follow a snippet from a code:
  
  InitialContext context = null;
  //getJbossContext() sets up the correct property
 file and returns 
  a context
  initialized to that property file
  context = getJbossContext();
  Object node = context.lookup(sessionName);
  PeopleDbManagerHome home =
 

(PeopleDbManagerHome)PortableRemoteObject.narrow(node,
  PeopleDbManagerHome.class);
  bean = home.create();
  } catch (RemoteException e) {
  printRemoteExceptionMessage();
  return null;
  }
  Hope it will help,
  
  Marco
  
  - Original Message - 
  From: zeallousbigpond.net.au
 [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Tuesday, September 09, 2003 1:17 AM
  Subject: EJB in tomcat
  
  
   hi,
  
I would like to ask, can Tomcat work with
 Enterprise
   Javabeans? 'cause I read from the Java site...it
 says that we 
  need a
   BEA server? Is it necessary? Or tomcat it self
 already has those
   libraries.
  
   Anson
  
  
  
  

-
  
   To unsubscribe, e-mail:
 [EMAIL PROTECTED]
   For additional commands, e-mail:
 [EMAIL PROTECTED]
  
  
  
  
  
 

---
  --
  To unsubscribe, e-mail:
 [EMAIL PROTECTED]
  For additional commands, e-mail:
 [EMAIL PROTECTED]
  
  
  
 
 

-
 To unsubscribe, e-mail:
 [EMAIL PROTECTED]
 For additional commands, e-mail:
 [EMAIL PROTECTED]
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: method of implementing a 'login' section in a site

2003-09-09 Thread Tim Funk
http://java.sun.com/webservices/docs/1.1/tutorial/doc/

Specifically: 
http://java.sun.com/webservices/docs/1.1/tutorial/doc/WebAppSecurity4.html#wp80556

-Tim

zeallousbigpond.net.au wrote:
haha thanks...but..how do you do that? =P

Anson 
- Original Message -
From: Filip Hanik [EMAIL PROTECTED]
Date: Tuesday, September 9, 2003 12:04 pm
Subject: Re: method of implementing a 'login' section in a site


use the servlet specification way!!

ie, protect your pages with entries in web.xml
then tomcat will log in the users for you
Filip
- Original Message - 
From: zeallousbigpond.net.au [EMAIL PROTECTED]
To: Tomcat Users List [EMAIL PROTECTED]
Sent: Monday, September 08, 2003 7:00 PM
Subject: method of implementing a 'login' section in a site

hi, 

  Thanks a lot for the email guys!! Another question I want to 
ask. I 
want to create a section of my site where I only allow users to 
use IF 
they have logged into my site. Either than using cookies to keep 
track 
if they have logged in or not, what method should I use to keep 
track 
of their status on each page?

Anson

- Original Message -
From: Marco Tedone [EMAIL PROTECTED]
Date: Tuesday, September 9, 2003 10:36 am
Subject: Re: EJB in tomcat

Well, Tomcat needs to 'colloquiate' with an application server 
(where EJBs
are deployed). The answer is yes, it's possible; all your 
application needs
to do is to establish a context with an application server and 
then it can
use the component deployed on application server generally using 
a 

lookup.
Here follow a snippet from a code:
InitialContext context = null;
//getJbossContext() sets up the correct property file and 
returns 

a context
initialized to that property file
context = getJbossContext();
Object node = context.lookup(sessionName);
PeopleDbManagerHome home =
(PeopleDbManagerHome)PortableRemoteObject.narrow(node,
PeopleDbManagerHome.class);
bean = home.create();
} catch (RemoteException e) {
printRemoteExceptionMessage();
return null;
}
Hope it will help,
Marco

- Original Message - 
From: zeallousbigpond.net.au [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, September 09, 2003 1:17 AM
Subject: EJB in tomcat



hi,

I would like to ask, can Tomcat work with Enterprise
Javabeans? 'cause I read from the Java site...it says that we 
need a

BEA server? Is it necessary? Or tomcat it self already has those
libraries.
Anson



---
--



To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: tomcat-user-
[EMAIL PROTECTED] 



-
--

--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



---
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


---
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: method of implementing a 'login' section in a site

2003-09-09 Thread Anson Zeall
I don't get ityou mean you have to can set the cookie yourself??

-Original Message-
From: Billy Kantartzis [mailto:[EMAIL PROTECTED]
Sent: Tuesday, September 09, 2003 8:41 PM
To: Tomcat Users List
Subject: Re: method of implementing a 'login' section in a site


The way i prefer to do it is use a simple db with the
user atributes (userid , password , etc), use cookies
to check if the user is logged in or not.

one thing i had problems with when i first implemented
this solution is that the cookies are stored in a
browser specific place and you might not be able to
access them easilly. a work round to this is to set
the cookie path yourself from a methid in the API (i
dont have it at the top of my head i will look it up)
and get the cookie reference using the location where
the cookie is stored

Billy


--- zeallousbigpond.net.au [EMAIL PROTECTED]
wrote:
 hi,

 Thanks a lot for the email guys!! Another
 question I want to ask. I
 want to create a section of my site where I only
 allow users to use IF
 they have logged into my site. Either than using
 cookies to keep track
 if they have logged in or not, what method should I
 use to keep track
 of their status on each page?

 Anson

 - Original Message -
 From: Marco Tedone [EMAIL PROTECTED]
 Date: Tuesday, September 9, 2003 10:36 am
 Subject: Re: EJB in tomcat

  Well, Tomcat needs to 'colloquiate' with an
 application server
  (where EJBs
  are deployed). The answer is yes, it's possible;
 all your
  application needs
  to do is to establish a context with an
 application server and
  then it can
  use the component deployed on application server
 generally using a
  lookup.
  Here follow a snippet from a code:
 
  InitialContext context = null;
  //getJbossContext() sets up the correct property
 file and returns
  a context
  initialized to that property file
  context = getJbossContext();
  Object node = context.lookup(sessionName); PeopleDbManagerHome home
  =
 

(PeopleDbManagerHome)PortableRemoteObject.narrow(node,
  PeopleDbManagerHome.class);
  bean = home.create();
  } catch (RemoteException e) { printRemoteExceptionMessage();
  return null;
  }
  Hope it will help,
 
  Marco
 
  - Original Message -
  From: zeallousbigpond.net.au
 [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Tuesday, September 09, 2003 1:17 AM
  Subject: EJB in tomcat
 
 
   hi,
  
I would like to ask, can Tomcat work with
 Enterprise
   Javabeans? 'cause I read from the Java site...it
 says that we
  need a
   BEA server? Is it necessary? Or tomcat it self
 already has those
   libraries.
  
   Anson
  
  
  
  

-
  
   To unsubscribe, e-mail:
 [EMAIL PROTECTED]
   For additional commands, e-mail:
 [EMAIL PROTECTED]
  
 
 
 
 
 

---
  --
  To unsubscribe, e-mail:
 [EMAIL PROTECTED]
  For additional commands, e-mail:
 [EMAIL PROTECTED]
 
 




-
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail:
 [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: method of implementing a 'login' section in a site

2003-09-09 Thread Marco Tedone
Well, what I can tell you what I've done, and then you're free to choose
(what a nice thing freedom...). I authenticated the user against a database;
if the user is authenticated, then I set a session attribute like (type
String): isUserAuthenticated.

Then, I wrote two custom tags (isUserAuthenticated, isNotUserAuthenticated)
which respectively executed the code within a block/block depending
whether the session attribute isUser exists (i.e. != null) or not. Then, in
my JSP page, I wrote something like the following:

isNotUserAuthenticated
  forward her to the login page
/isNotUserAuthenticated

isUserAuthenticated
  a href=.../a
  a href=.../a
  a href=.../a
/isUserAuthenticated

I discovered this method is also useful to allow 'Administration'
functionality, so that similarly you may declared isAdministrator
isNotAdministrator

Hope this will help,

Marco
- Original Message - 
From: zeallousbigpond.net.au [EMAIL PROTECTED]
To: Tomcat Users List [EMAIL PROTECTED]
Sent: Tuesday, September 09, 2003 3:00 AM
Subject: method of implementing a 'login' section in a site


 hi,

 Thanks a lot for the email guys!! Another question I want to ask. I
 want to create a section of my site where I only allow users to use IF
 they have logged into my site. Either than using cookies to keep track
 if they have logged in or not, what method should I use to keep track
 of their status on each page?

 Anson

 - Original Message -
 From: Marco Tedone [EMAIL PROTECTED]
 Date: Tuesday, September 9, 2003 10:36 am
 Subject: Re: EJB in tomcat

  Well, Tomcat needs to 'colloquiate' with an application server
  (where EJBs
  are deployed). The answer is yes, it's possible; all your
  application needs
  to do is to establish a context with an application server and
  then it can
  use the component deployed on application server generally using a
  lookup.
  Here follow a snippet from a code:
 
  InitialContext context = null;
  //getJbossContext() sets up the correct property file and returns
  a context
  initialized to that property file
  context = getJbossContext();
  Object node = context.lookup(sessionName);
  PeopleDbManagerHome home =
  (PeopleDbManagerHome)PortableRemoteObject.narrow(node,
  PeopleDbManagerHome.class);
  bean = home.create();
  } catch (RemoteException e) {
  printRemoteExceptionMessage();
  return null;
  }
  Hope it will help,
 
  Marco
 
  - Original Message - 
  From: zeallousbigpond.net.au [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Tuesday, September 09, 2003 1:17 AM
  Subject: EJB in tomcat
 
 
   hi,
  
I would like to ask, can Tomcat work with Enterprise
   Javabeans? 'cause I read from the Java site...it says that we
  need a
   BEA server? Is it necessary? Or tomcat it self already has those
   libraries.
  
   Anson
  
  
  
   -
  
   To unsubscribe, e-mail: [EMAIL PROTECTED]
   For additional commands, e-mail: [EMAIL PROTECTED]
  
 
 
 
 
  ---
  --
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 



 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]






-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



method of implementing a 'login' section in a site

2003-09-08 Thread zeallousbigpond.net.au
hi, 

Thanks a lot for the email guys!! Another question I want to ask. I 
want to create a section of my site where I only allow users to use IF 
they have logged into my site. Either than using cookies to keep track 
if they have logged in or not, what method should I use to keep track 
of their status on each page?

Anson

- Original Message -
From: Marco Tedone [EMAIL PROTECTED]
Date: Tuesday, September 9, 2003 10:36 am
Subject: Re: EJB in tomcat

 Well, Tomcat needs to 'colloquiate' with an application server 
 (where EJBs
 are deployed). The answer is yes, it's possible; all your 
 application needs
 to do is to establish a context with an application server and 
 then it can
 use the component deployed on application server generally using a 
 lookup.
 Here follow a snippet from a code:
 
 InitialContext context = null;
 //getJbossContext() sets up the correct property file and returns 
 a context
 initialized to that property file
 context = getJbossContext();
 Object node = context.lookup(sessionName);
 PeopleDbManagerHome home =
 (PeopleDbManagerHome)PortableRemoteObject.narrow(node,
 PeopleDbManagerHome.class);
 bean = home.create();
 } catch (RemoteException e) {
 printRemoteExceptionMessage();
 return null;
 }
 Hope it will help,
 
 Marco
 
 - Original Message - 
 From: zeallousbigpond.net.au [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Tuesday, September 09, 2003 1:17 AM
 Subject: EJB in tomcat
 
 
  hi,
 
   I would like to ask, can Tomcat work with Enterprise
  Javabeans? 'cause I read from the Java site...it says that we 
 need a
  BEA server? Is it necessary? Or tomcat it self already has those
  libraries.
 
  Anson
 
 
 
  -
 
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 
 
 
 
 ---
 --
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: method of implementing a 'login' section in a site

2003-09-08 Thread Filip Hanik
use the servlet specification way!!

ie, protect your pages with entries in web.xml
then tomcat will log in the users for you

Filip
- Original Message - 
From: zeallousbigpond.net.au [EMAIL PROTECTED]
To: Tomcat Users List [EMAIL PROTECTED]
Sent: Monday, September 08, 2003 7:00 PM
Subject: method of implementing a 'login' section in a site


hi, 

Thanks a lot for the email guys!! Another question I want to ask. I 
want to create a section of my site where I only allow users to use IF 
they have logged into my site. Either than using cookies to keep track 
if they have logged in or not, what method should I use to keep track 
of their status on each page?

Anson

- Original Message -
From: Marco Tedone [EMAIL PROTECTED]
Date: Tuesday, September 9, 2003 10:36 am
Subject: Re: EJB in tomcat

 Well, Tomcat needs to 'colloquiate' with an application server 
 (where EJBs
 are deployed). The answer is yes, it's possible; all your 
 application needs
 to do is to establish a context with an application server and 
 then it can
 use the component deployed on application server generally using a 
 lookup.
 Here follow a snippet from a code:
 
 InitialContext context = null;
 //getJbossContext() sets up the correct property file and returns 
 a context
 initialized to that property file
 context = getJbossContext();
 Object node = context.lookup(sessionName);
 PeopleDbManagerHome home =
 (PeopleDbManagerHome)PortableRemoteObject.narrow(node,
 PeopleDbManagerHome.class);
 bean = home.create();
 } catch (RemoteException e) {
 printRemoteExceptionMessage();
 return null;
 }
 Hope it will help,
 
 Marco
 
 - Original Message - 
 From: zeallousbigpond.net.au [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Tuesday, September 09, 2003 1:17 AM
 Subject: EJB in tomcat
 
 
  hi,
 
   I would like to ask, can Tomcat work with Enterprise
  Javabeans? 'cause I read from the Java site...it says that we 
 need a
  BEA server? Is it necessary? Or tomcat it self already has those
  libraries.
 
  Anson
 
 
 
  -
 
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
 
 
 
 
 
 ---
 --
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: method of implementing a 'login' section in a site

2003-09-08 Thread zeallousbigpond.net.au
haha thanks...but..how do you do that? =P

Anson 
- Original Message -
From: Filip Hanik [EMAIL PROTECTED]
Date: Tuesday, September 9, 2003 12:04 pm
Subject: Re: method of implementing a 'login' section in a site

 use the servlet specification way!!
 
 ie, protect your pages with entries in web.xml
 then tomcat will log in the users for you
 
 Filip
 - Original Message - 
 From: zeallousbigpond.net.au [EMAIL PROTECTED]
 To: Tomcat Users List [EMAIL PROTECTED]
 Sent: Monday, September 08, 2003 7:00 PM
 Subject: method of implementing a 'login' section in a site
 
 
 hi, 
 
Thanks a lot for the email guys!! Another question I want to 
 ask. I 
 want to create a section of my site where I only allow users to 
 use IF 
 they have logged into my site. Either than using cookies to keep 
 track 
 if they have logged in or not, what method should I use to keep 
 track 
 of their status on each page?
 
 Anson
 
 - Original Message -
 From: Marco Tedone [EMAIL PROTECTED]
 Date: Tuesday, September 9, 2003 10:36 am
 Subject: Re: EJB in tomcat
 
  Well, Tomcat needs to 'colloquiate' with an application server 
  (where EJBs
  are deployed). The answer is yes, it's possible; all your 
  application needs
  to do is to establish a context with an application server and 
  then it can
  use the component deployed on application server generally using 
 a 
  lookup.
  Here follow a snippet from a code:
  
  InitialContext context = null;
  //getJbossContext() sets up the correct property file and 
 returns 
  a context
  initialized to that property file
  context = getJbossContext();
  Object node = context.lookup(sessionName);
  PeopleDbManagerHome home =
  (PeopleDbManagerHome)PortableRemoteObject.narrow(node,
  PeopleDbManagerHome.class);
  bean = home.create();
  } catch (RemoteException e) {
  printRemoteExceptionMessage();
  return null;
  }
  Hope it will help,
  
  Marco
  
  - Original Message - 
  From: zeallousbigpond.net.au [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Tuesday, September 09, 2003 1:17 AM
  Subject: EJB in tomcat
  
  
   hi,
  
I would like to ask, can Tomcat work with Enterprise
   Javabeans? 'cause I read from the Java site...it says that we 
  need a
   BEA server? Is it necessary? Or tomcat it self already has those
   libraries.
  
   Anson
  
  
  
   ---
 --
  
   To unsubscribe, e-mail: [EMAIL PROTECTED]
   For additional commands, e-mail: tomcat-user-
 [EMAIL PROTECTED] 
  
  
  
  
  -
 --
  --
  To unsubscribe, e-mail: [EMAIL PROTECTED]
  For additional commands, e-mail: [EMAIL PROTECTED]
  
  
 
 
 
 ---
 --
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 
 
 ---
 --
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 
 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]