Re: filters on j_security_check

2011-10-17 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chema, On 10/16/2011 1:55 PM, Chema wrote: Frankly, if you're using Spring Security, I'd stick with it. I myself am thinking of making the switch. Yes, I tried it and like it , but I need Single Sign On support and the solutions what

Re: filters on j_security_check

2011-10-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chema, On 10/15/2011 4:18 PM, Chema wrote: This is one of the reasons I switched to SecurityFilter: there is a FlexibleRealmInterface that passes-in the HttpServletRequest that was used to attempt authentication. That allows you to get nice

Re: filters on j_security_check

2011-10-16 Thread Chema
Frankly, if you're using Spring Security, I'd stick with it. I myself am thinking of making the switch. Yes, I tried it and like it , but I need Single Sign On support and the solutions what Spring Security offers are complicated to implement by me

Re: filters on j_security_check

2011-10-15 Thread Pid
On 13/10/2011 20:53, Caldarale, Charles R wrote: If you want to do programmatic security in addition to declarative security, Or use the Servlet 3.0 APIs, supported by Tomcat. p signature.asc Description: OpenPGP digital signature

Re: filters on j_security_check

2011-10-15 Thread Chema
This is one of the reasons I switched to SecurityFilter: there is a FlexibleRealmInterface that passes-in the HttpServletRequest that was used to attempt authentication. That allows you to get nice things like the ip address of the request for logging. I'm interested on what are talking

RE: filters on j_security_check

2011-10-15 Thread Caldarale, Charles R
From: Chema [mailto:demablo...@gmail.com] Subject: Re: filters on j_security_check where I can find info about SecurityFilter ? The first hit on Google... - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended

filters on j_security_check

2011-10-13 Thread Alejandro Soto
Hi, my name is Alejandro, I am working with Tomcat 7.0.20 and I need to know how can I apply filters to j_security_check to verify the status of login before continue with my authentication process. I was thinking to use valves, but I read on internet that valves will be replaced with Filters

Re: filters on j_security_check

2011-10-13 Thread Pid
On 13/10/2011 15:09, Alejandro Soto wrote: Hi, my name is Alejandro, I am working with Tomcat 7.0.20 and I need to know how can I apply filters to j_security_check to verify the status of login before continue with my authentication process. You can't use Filters because the Authentication

Re: filters on j_security_check

2011-10-13 Thread Alejandro Soto
filters to j_security_check to verify the status of login before continue with my authentication process. You can't use Filters because the Authentication Valves act before the Filter chain. Why do you need to filter on j_security_check? p I was thinking to use valves, but I read

RE: filters on j_security_check

2011-10-13 Thread Caldarale, Charles R
From: Alejandro Soto [mailto:smalejan...@gmail.com] Subject: Re: filters on j_security_check what i need is to know if the authentication was successful or not What are you going to do with said information? I just need to know that status and has to be before the authentication

Re: filters on j_security_check

2011-10-13 Thread Alejandro Soto
...@gmail.com] Subject: Re: filters on j_security_check what i need is to know if the authentication was successful or not What are you going to do with said information? I just need to know that status and has to be before the authentication mechanism continues. Why? It seems like you might

RE: filters on j_security_check

2011-10-13 Thread Caldarale, Charles R
From: Alejandro Soto [mailto:smalejan...@gmail.com] Subject: Re: filters on j_security_check call j_security_check from inside another servlet is just an idea, why is bad idea? Because it's not supported by the spec; please read SRV.12. If you want to do programmatic security in addition

Re: filters on j_security_check

2011-10-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 10/13/2011 2:11 PM, Caldarale, Charles R wrote: From: Alejandro Soto [mailto:smalejan...@gmail.com] Subject: Re: filters on j_security_check what i need is to know if the authentication was successful or not What are you going