RE: Axis security, when web-app can't use Basic Web Authenticatio n

2005-02-17 Thread aveitas
Not sure if this fits your requirements, but if you want to use HTTP Basic Authentication **without** having the servlet container manage it for you, try using: org.apache.axis.handlers.http.HttpAuthHandler This class strips out the user name and password from the HTTP Headers and sets the userna

RE: Axis security, when web-app can't use Basic Web Authenticatio n

2005-02-17 Thread THOMAS, JAI [AG-Contractor/1000]
Sharam, This approach is interoperable since you are effectively setting these data in message header.  For e.g. .NET client use methods provided by .NET to do the same.   Jai   -Original Message-From: Sharam Fouladgar-Mercer [mailto:[EMAIL PROTECTED]Sent: Thursday, February

RE: Axis security, when web-app can't use Basic Web Authenticatio n

2005-02-17 Thread THOMAS, JAI [AG-Contractor/1000]
There are couple of approaches you can take, but here's what I would do.    - Implement an Authentication handler and Authorization handler extending BasicHandler    These handlers would directly invoke your authentication/authorization methods and validate credentials.   - Set authenticat