Re: Tomcat Custom Authenticator

2009-08-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Daniel, On 8/14/2009 2:24 PM, Daniel Stephens wrote: For Security reasons, We need to do logging for IP,username, etc(AUDIT). We need to log success and failed attempts. We don't want to modify the internal classes(unless it's impossible).

Tomcat Custom Authenticator

2009-08-14 Thread Daniel Stephens
Need some help or advice.. For Security reasons, We need to do logging for IP,username, etc(AUDIT). We need to log success and failed attempts. We don't want to modify the internal classes(unless it's impossible). We are using the FORM auth-method, we POST to j_security_check. We have

Re: Tomcat Custom Authenticator

2009-08-14 Thread Mark Thomas
Daniel Stephens wrote: Need some help or advice.. For Security reasons, We need to do logging for IP,username, etc(AUDIT). We need to log success and failed attempts. We don't want to modify the internal classes(unless it's impossible). We are using the FORM auth-method, we POST