Re: Authentication crisis

2006-01-30 Thread Luis Gervaso
gt; Hi > > Take a look at SecurityFilter. With that you get exactly what you are > looking for. > > Hermod > > -Original Message- > From: Luis Gervaso [mailto:[EMAIL PROTECTED] > Sent: Monday, January 30, 2006 11:29 AM > To: Struts Users Mailing List; To

RE: Authentication crisis

2006-01-30 Thread hermod.opstvedt
Hi Take a look at SecurityFilter. With that you get exactly what you are looking for. Hermod -Original Message- From: Luis Gervaso [mailto:[EMAIL PROTECTED] Sent: Monday, January 30, 2006 11:29 AM To: Struts Users Mailing List; Tomcat Users List Subject: Re: Authentication crisis the

Re: Authentication crisis

2006-01-30 Thread Luis Gervaso
the real problem is that we can't do anything before or after authentication using a filter solve this problem with url pattern j_securty_check but this is avoided because this authentication method "must be" equal basic authentication? this makes real authentication scenarios where we need crea

Re: Authentication crisis

2006-01-30 Thread Luis Gervaso
yes there is an entry in web.xml - security-constraint and the user is authenticated using doPost() method of LoginServlet regards 2006/1/30, deepak <[EMAIL PROTECTED]>: > > It seems that the request.getUserPrincipal() will return non-null value > only > when you request the protected resource s

Re: Authentication crisis

2006-01-30 Thread deepak
It seems that the request.getUserPrincipal() will return non-null value only when you request the protected resource secured by in web.xml even if the user sent the request has been authenticated. - Original Message - From: "Luis Gervaso" <[EMAIL PROTECTED]> To: "Struts Users Mailing Lis