Re: [SOLVED] Form Auth + xml users database

2005-02-08 Thread Omar Adobati
nobody can help me? On Mon, 7 Feb 2005 09:57:32 +0100, Omar Adobati [EMAIL PROTECTED] wrote: Thx for ur answers, I have reied what you say about the second question, but it's do not work. This is how I have changed my context.xml file: === ?xml version='1.0' encoding='utf-8'? Context

Re: [SOLVED] Form Auth + xml users database

2005-02-07 Thread Omar Adobati
Thx for ur answers, I have reied what you say about the second question, but it's do not work. This is how I have changed my context.xml file: === ?xml version='1.0' encoding='utf-8'? Context privileged=true swallowOutput=true workDir=work\Catalina\photoalbum\ path=/ cacheTTL=0

Form Auth + xml users database

2005-02-06 Thread Omar Adobati
Good Morning, I'm trying to set up an authentication task using the form method and an xml files to store the users and their roles. Now, I've add this to the web.xml file: == [...] resource-env-ref resource-env-ref-namePhotoUsers/resource-env-ref-name

Re: Form Auth + xml users database

2005-02-06 Thread Mario Winterer
Hi! What does Now, this seems to not work... mean??? Please go more into detai! We cannot tell you how to fix it if you do not tell us WHAT is going wrong! (e.g.: Tomcat can't start; Tomcat starts but web-app. can't start; Tomcat starts, webapp starts but you get exceptions each time you

Re: Form Auth + xml users database

2005-02-06 Thread sven morales
Hi, At first glance your config seems to be okay. However, confirm that GlobalResources can be a sub-element within Context. I suspect it is not. Consult this link: http://jakarta.apache.org/tomcat/tomcat-5.0-doc/config/context.html aka_sergio --- Omar Adobati [EMAIL PROTECTED] wrote:

Re: Form Auth + xml users database

2005-02-06 Thread Mario Winterer
Hi again! I've noticed one thing in your configuration - but I do not know if this is the reason for your problem: Remove the resource-env-ref-xxx entries from web.xml. You do not need a JNDI-reference to your user database here! (Apart from that this is wrong - it should be a

Re: Form Auth + xml users database

2005-02-06 Thread Omar Adobati
I'm very sorry, don't seems to work mean that I can use the authentication procedure with the names I have stored in my xml database... this is what I mean saying that it's not works hope this should be more helpfully On Sun, 06 Feb 2005 18:43:45 +0100, Mario Winterer [EMAIL PROTECTED] wrote:

Re: Form Auth + xml users database

2005-02-06 Thread sven morales
Hi, It is not wrong to have that resource-env-ref within his web.xml. Look at the manager/WEB_INF/web.xml for a working application (manager) and you will see exact elements. aka_sergio --- Mario Winterer [EMAIL PROTECTED] wrote: Hi again! I've noticed one thing in your configuration -

Re: Form Auth + xml users database

2005-02-06 Thread Mario Winterer
Hi! So when you try to access one of the protected resources via browser, are these resources protected (I mean can you access them, or does tomcat redirect you to your login-page, or do you get a access denied page?) Tex Omar Adobati schrieb: I'm very sorry, don't seems to work mean that I

Re: Form Auth + xml users database

2005-02-06 Thread Mario Winterer
You are right! I'm sorry for any confusion! I thought resource-env-ref is just for environment variables (similiar to env-entry). I should have read the docu to its end... ;-) Nevertheless, I think this resource reference is not required for servlet-security. Tex sven morales schrieb: Hi,

Re: Form Auth + xml users database

2005-02-06 Thread Omar Adobati
But did you connect the UserDatabase with the web-application by specifying a realm in your context? (context.xml or server.xml) How can I set the Realm in my Context to specity an xml database? (maybe this is the main problem because it actually not exist)

Re: [SOLVED] Form Auth + xml users database

2005-02-06 Thread Omar Adobati
changes in server.xml: === GlobalNamingResources Resource type=org.apache.catalina.UserDatabase description=User database that can be updated and saved auth=Container name=PhotoAlbum/ ResourceParams name=PhotoAlbum parameter namefactory/name

Re: [SOLVED] Form Auth + xml users database

2005-02-06 Thread Mario Winterer
Hi! I'm happy you could solve your problem now! Seems the reason was the missing Realm-definition in your context.xml. To Question 1) Tomcat offers a separate JNDI-namespace for each web application (so if you have 4 web applications you will have 4 namespaces). These namespaces are configured

form-auth

2003-09-08 Thread Maxime Colas des Francs
Hi, In my web application i use a FORM-based authentification. After an athentification failure, request is forward to the jsp file form-error-page defines in my web.xml. Is it possible to get the user ID of the failed attempt ? get back j_security_check params ? Thks

Form Auth

2003-04-01 Thread Michael D. Kirkpatrick
I am not quite sure if this question is suitable for this mailing list. If not, please forgive me. I am using the form authentication for adding security to one of my apps. Since this app will be in use with several web sites, I am forced to pass something like ?site=somesite in my url. The

Re: Form Auth

2003-04-01 Thread Henning Heil
Hi Michael, Michael D. Kirkpatrick wrote on 01.04.2003 17:05 I am not quite sure if this question is suitable for this mailing list. If not, please forgive me. [snip] So here is my question. How can I capture the original query string or make the query string in web.xml dynamic? in

Re: Form Auth

2003-04-01 Thread Michael D. Kirkpatrick
It returns null. I noticed that it places all the POST/GET information into a session to be re-submitted to the actual page after successful login. Know of a way that I can access the session information to extract a specific string in it? Henning Heil wrote: Hi Michael, Michael D.

Re: Form Auth

2003-04-01 Thread Nelson Brito
Hi, I'm very new with tomcat and perhaps this question is a bit too dumb... but i'd like to know if i can still use apache as my web server, and load some sort of a tomcat module to serv my jsp?? like i do with php... i can't find any doc about this on the manual :-( Thank you very much, nb

Re: Form Auth

2003-04-01 Thread Michael D. Kirkpatrick
Search for mod_jk It is rather easy to setup. You run your apache web server on port 80 (default). You run Tomcat on port 8080 (default). You use mod_jk to define *.do and *.jsp to be served with Tomcat. Note: Tomcat's home directory is different then Apache's. You will have to play with some

Re: Form Auth

2003-04-01 Thread Jeff Tulley
I just found out that this is a known problem with the Coyote connectors, both the HTTP connector and the JkHandler connector. There is some code not implemented or something, and there is already a bug report in bugzilla. To verify if we are talking about the same thing, go back to using an old

Re: Form Auth

2003-04-01 Thread Michael D. Kirkpatrick
Ok. For configuration and some implementation, I am still a newbie here. How do you change the connector to a non-Coyote one? Which one would you recomend? Where can I find it? Jeff Tulley wrote: I just found out that this is a known problem with the Coyote connectors, both the HTTP

Re: Form Auth

2003-04-01 Thread Jeff Tulley
It is done through server.xml. I don't know what web server connector you were using, but if it was Apache and mod_jk, you can still use it. On Tomcat's side, comment out the Coyote connector, which looks like: Connector className=org.apache.coyote.tomcat4.CoyoteConnector

Re: Form Auth

2003-04-01 Thread Michael D. Kirkpatrick
Same thing... Jeff Tulley wrote: It is done through server.xml. I don't know what web server connector you were using, but if it was Apache and mod_jk, you can still use it. On Tomcat's side, comment out the Coyote connector, which looks like: Connector

Re: Form Auth

2003-04-01 Thread Paul Yunusov
On Tuesday 01 April 2003 10:05 am, Michael D. Kirkpatrick wrote: I am not quite sure if this question is suitable for this mailing list. If not, please forgive me. I am using the form authentication for adding security to one of my apps. Since this app will be in use with several web sites,

Re: Form Auth

2003-04-01 Thread Michael D. Kirkpatrick
Thanks. I will look into it. Paul Yunusov wrote: On Tuesday 01 April 2003 10:05 am, Michael D. Kirkpatrick wrote: I am not quite sure if this question is suitable for this mailing list. If not, please forgive me. I am using the form authentication for adding security to one of my

Re: Form auth

2002-11-02 Thread Jan Agermose
[EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Saturday, November 02, 2002 4:38 AM Subject: Re: Form auth Jan, I guess I cannot understand your problem. The way I do it on my site is very simple: A loginform on the front page. When the user logs in, get the user permissions from

Re: Form auth

2002-11-01 Thread Jan Agermose
: Friday, November 01, 2002 6:00 AM Subject: Re: Form auth One way to do this is to create a filter for the protected resources. When accessing them, the filter gets invoked. It checks on the session wheter the user has already logged in or not. If not, it redirects to the login page which in turn

Re: Re: Form auth

2002-11-01 Thread Aniket B Sutaria
Martinez [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Friday, November 01, 2002 6:00 AM Subject: Re: Form auth One way to do this is to create a filter for the protected resources. When accessing them, the filter gets invoked. It checks on the session wheter the user has already

Re: Form auth

2002-11-01 Thread Jose Alfonso Martinez
: Alfonso Martinez [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Friday, November 01, 2002 6:00 AM Subject: Re: Form auth One way to do this is to create a filter for the protected resources. When accessing them, the filter gets invoked. It checks on the session wheter

Form auth

2002-10-31 Thread Jan Agermose
I would like to use formbased auth for my application, but it seams, that it is based on 1. user trying to access som resource 2. if not logged in - prompt This is of cause good. But usualy you have a webpage that has a login-form somewhere on the page to allow the user to log in at

Re: Form auth

2002-10-31 Thread Michael Nicholson
a button w/ a link to a secured resource, and let the form-based authentication take place there Mike - Original Message - From: Jan Agermose [EMAIL PROTECTED] To: 'Tomcat Users tomcat [EMAIL PROTECTED] Sent: Thursday, October 31, 2002 11:15 AM Subject: Form auth I would like to use

Re: Form auth

2002-10-31 Thread Craig R. McClanahan
On Thu, 31 Oct 2002, Jan Agermose wrote: Date: Thu, 31 Oct 2002 17:15:08 +0100 From: Jan Agermose [EMAIL PROTECTED] Reply-To: Tomcat Users List [EMAIL PROTECTED] To: 'Tomcat Users tomcat [EMAIL PROTECTED] Subject: Form auth I would like to use formbased auth for my application

Re: Form auth

2002-10-31 Thread Jan Agermose
You won't be able to have the login form itself on the unsecured page, but you can easily provide a Log In button (say, on your home page) like this: * Make the log in button link to a resource in a protected directory * Make that resource just do a redirect back to the home page When

Re: Form auth

2002-10-31 Thread Alfonso Martinez
Users tomcat [EMAIL PROTECTED] Subject: Form auth I would like to use formbased auth for my application, but it seams, that it is based on 1. user trying to access som resource 2. if not logged in - prompt That's correct. From the user point of view, it operates exactly like

form auth: how to get user name if login was incorrect

2001-08-14 Thread Taavi Tiirik
Hullo, How to get a user name (and password) with form authentication, if authentication was not successful and user was sent to error page. Is this information lost at this moment or can I get it somehow? I am using tomcat 3.2.3 at the moment... thanks, Taavi

RE: form auth: how to get user name if login was incorrect

2001-08-14 Thread Randy Layman
PROTECTED]] Sent: Tuesday, August 14, 2001 4:21 AM To: [EMAIL PROTECTED] Subject: form auth: how to get user name if login was incorrect Hullo, How to get a user name (and password) with form authentication, if authentication was not successful and user was sent to error page

RE: form auth: how to get user name if login was incorrect

2001-08-14 Thread Taavi Tiirik
How to get a user name (and password) with form authentication, if authentication was not successful and user was sent to error page. Is this information lost at this moment or can I get it somehow? From: Randy Layman I believe that its in the seesion.getAttribute(j_username). I might

RE: form auth: how to get user name if login was incorrect

2001-08-14 Thread Randy Layman
-Original Message- From: Taavi Tiirik [mailto:[EMAIL PROTECTED]] Sent: Tuesday, August 14, 2001 8:01 AM To: [EMAIL PROTECTED] Subject: RE: form auth: how to get user name if login was incorrect How to get a user name (and password) with form authentication

RE: form auth: how to get user name if login was incorrect

2001-08-14 Thread Randy Layman
-Original Message- From: Rob S. [mailto:[EMAIL PROTECTED]] Sent: Tuesday, August 14, 2001 9:32 AM To: [EMAIL PROTECTED] Subject: Re: form auth: how to get user name if login was incorrect On Tue, 14 Aug 2001 14:00:46 +0200 [EMAIL PROTECTED] wrote: How to get a user

RE: form auth: how to get user name if login was incorrect

2001-08-14 Thread Craig R. McClanahan
On Tue, 14 Aug 2001, Randy Layman wrote: I believe that its in the seesion.getAttribute(j_username). I might be wrong about that (I have modified my local copy of that code. The code now does this, but I believe that it originally did this.) That's specific to the way that one

3.2.1 + FORM Auth + POST data

2001-05-06 Thread Alfredo Solano Martinez
Greetings, Does anyone know why Tomcat does not store the POST parameters when launching j_security_check? I suppose it is because the 2.2 spec says: The URL path which triggered the authentication is stored by the container. Just the URL? Where are the POST data gone? (GET works ok, of