Re: tomcat9 j_security_check request.getRequestURI() incorrect after POST

2018-05-04 Thread Dirk Ooms
Thanks for fixing this. Happy to help. On 3 May 2018 at 21:31, Mark Thomas <ma...@apache.org> wrote: > On 03/05/18 20:17, Mark Thomas wrote: > > On 02/05/18 16:08, Dirk Ooms wrote: > >> Mark, > >> > >> you can reproduce it using the FormAuthent

Re: tomcat9 j_security_check request.getRequestURI() incorrect after POST

2018-05-02 Thread Dirk Ooms
the mailing list). dirk On 1 May 2018 at 16:20, Dirk Ooms <dir...@gmail.com> wrote: > apologies for the incomplete info. it is tomcat 9.0.6 > > i will try to set up a test case and get back to you. > > dirk > > > On 1 May 2018 at 16:07, Mark Thomas <ma...@apa

Re: tomcat9 j_security_check request.getRequestURI() incorrect after POST

2018-05-01 Thread Dirk Ooms
apologies for the incomplete info. it is tomcat 9.0.6 i will try to set up a test case and get back to you. dirk On 1 May 2018 at 16:07, Mark Thomas <ma...@apache.org> wrote: > On 01/05/18 14:36, Dirk Ooms wrote: > > Hello, > > > > i did an upgrade from tomcat5

tomcat9 j_security_check request.getRequestURI() incorrect after POST

2018-05-01 Thread Dirk Ooms
Hello, i did an upgrade from tomcat5.5 to tomcat9 and i'm using j_security_check. in tomcat5.5 when a user was not logged in and he/she requested a url, the login page was returned and after logging in the user was given the requested resource. when i requested request.getRequestURI() in my code

Re: user switching or application interacting with container based authentication

2012-05-24 Thread dirk ooms
Andre, thanks for your thoughts on this. i agree that this issue brings me to 'a loop of increasing contradictions'. it's probably good to go one step back and explain the real-life requirement: we have an application that is used by many small companies, each company has its own data and can

Re: user switching or application interacting with container based authentication

2012-05-24 Thread dirk ooms
: SHA1 Dirk, On 5/23/12 7:01 PM, dirk ooms wrote: any hint on fast-user-switching or applications-interacting-with-container-based-authentication are very welcome. We use securityfilter for AAA and the user is stored in the session: you can just replace the user object and boom: you

Re: user switching or application interacting with container based authentication

2012-05-24 Thread dirk ooms
How about your barcode (or card or whatever) idea, to allow users to switch id on-the-fly ? I am curious as to how you implement that. after some user has logged in in a 'normal/standard' way (using e.g. form-based, container-managed), there is a text input field in the header of the

user switching or application interacting with container based authentication

2012-05-23 Thread dirk ooms
Hello, we are running a web application with form based authentication. we now have a requirement to switch between users (for subsets of users) with a minimum of user interaction (log out and log in providing username password is way too much work for the user). so i was thinking of providing

Re: Tomcat does not stay on as a windows service

2007-12-14 Thread dirk ooms
there is another process that already uses port 8005. check whether there are other servers (apache?) or instances of tomcat running on your machine. dirk On Friday 14 December 2007 12:31, Ljuba Veselinova wrote: I am trying to get Tomcat going on a windows machine. There are running and

extra field in form-based authentication

2007-12-13 Thread dirk ooms
Hello, I would like to have an extra field in my form-based login page, but I'm wondering how I can retrieve the value of that extra field within my application (request.getParameter(blabla) does not work). I searched the web and a suggestion was to override authenticate() in

Re: extra field in form-based authentication

2007-12-13 Thread dirk ooms
to perform any extra work you need. (Somehow - I doubt that will work) -Tim dirk ooms wrote: Hello, I would like to have an extra field in my form-based login page, but I'm wondering how I can retrieve the value of that extra field within my application (request.getParameter(blabla

Re: extra field in form-based authentication

2007-12-13 Thread dirk ooms
dirk ooms wrote: interesting suggestion, but in my case the extra field is not related to the username. i would like to have a field where the user indicates on what type of device he/she works, so we can offer the appropriate stylesheet. On Thursday 13 December 2007 13:00, David Delbecq

Re: symbolic links usage

2006-07-18 Thread dirk ooms
make allowLinking=true an attribute of Context itself On Tuesday 18 July 2006 01:57, Phill O'Flynn wrote: I have a web app that needs to access directories outside of the context using symlinks. However these files are not visible to the servlet. I have looked at all the FAQ's and made the

Re: Tomcat Symbolic Links

2006-07-11 Thread dirk ooms
in your server.xml or context description Context .. allowLinking=true On Tuesday 11 July 2006 21:32, Mann, Bradley wrote: How do I instruct Tomcat to follow symbolic links within the file system? For instance, I need to have index.html be a symbolic link to another file. Thanks, Brad

Re: only https on login form

2006-07-06 Thread dirk ooms
Mark, Thanks for your answer. So is it common practice to keep the complete session encrypted even if one only desires encrypted authentication? cheers, dirk On Thursday 06 July 2006 03:01, Mark Thomas wrote: dirk ooms wrote: Is there a way to do this or am i missing something

only https on login form

2006-07-05 Thread dirk ooms
Hi List, I am using a form-based login in my Tomcat application. My intention was to use https on the login form page, but once the user is logged in, http would be ok for further interaction (my main concern was not to send the password in the clear). I had hoped to obtain this behavior with

Re: how to implement complicated log on using container based security

2006-07-01 Thread dirk ooms
i don't have an answer to your question, but you might consider using [EMAIL PROTECTED] as username ... On Saturday 01 July 2006 18:02, Andrew E. Davidson wrote: Hi I have a b2b portal. In my world, their may be multiple users with the same name. For example John that works for the xyz corp,

Re: Stateless Tomcat Application

2006-06-28 Thread dirk ooms
AFAIK there are 2 situations in which Tomcat creates a HttpSession (generating JSESSIONIDS) without an explicit call to request.getSession(): - when the form-based login procedure is used - when jsp's are compiled, a session will automatically be created by the JSP engine (also for jsp's that

Re: multiple instances of load-on-startup classes

2006-06-27 Thread dirk ooms
i had something similar and the reason then was that i had duplicate context definition files. it seems that your context definition is not in server.xml, so you might check whether there are duplicate context files somewhere in tomcat/conf/... dirk On Tuesday 27 June 2006 13:43, Mark Benussi