Re: container based authentication

2009-10-27 Thread PDiefent 


I've uploaded a little Eclipse Project without WEB-INF/lib/libraries -
perhaps anybody can help to get it running ...



PDiefent wrote:
> 
> 
> Hello,
> I try to secure my wicket appication with container based authentication.
> The problem is, that all users can log also if they don't have the right
> role.
> 
> In my login.html I use following form action:
>   
> 
> If I change the security-constraint - url-pattern from "/login" to "/*",
> the security check works, but I don't get any page displayed
> (images/leer.gif not found).
>  Also the login page doesn't render complete because all images are
> blocked.
> 
> It would be nice if their is an example for the correct use of the
> container based authentication. The often statet example in
> 
> http://cwiki.apache.org/WICKET/servlet-container-authentication.html
> 
> doesn't work!
> 
> 
> 
> The configuration for Apache Tomcat 6.xx:
> 
> 
> <>tomcat-users>
>   
>   
>   
>   
>   
>   
>   
>   
> 
> 
> -
> To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
> For additional commands, e-mail: users-h...@wicket.apache.org
> 
> 
> 
http://www.nabble.com/file/p26078586/SimpleApp.zip SimpleApp.zip 
-- 
View this message in context: 
http://www.nabble.com/container-based-authentication-tp26010834p26078586.html
Sent from the Wicket - User mailing list archive at Nabble.com.


-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org

container based authentication

2009-10-22 Thread Peter Diefenthaeler 

Hello,
I try to secure my wicket appication with container based authentication.
The problem is, that all users can log also if they don't have the right
role.

In my login.html I use following form action:
  

If I change the security-constraint - url-pattern from "/login" to "/*",
the security check works, but I don't get any page displayed
(images/leer.gif not found).
 Also the login page doesn't render complete because all images are
blocked.

It would be nice if their is an example for the correct use of the
container based authentication. The often statet example in

http://cwiki.apache.org/WICKET/servlet-container-authentication.html

doesn't work!



The configuration for Apache Tomcat 6.xx:


<>tomcat-users>
  
  
  
  
  
  
  
  



The deployment descriptor:


http://java.sun.com/dtd/web-app_2_3.dtd";>


  MyWeb
  
wicket.wicket
org.apache.wicket.protocol.http.WicketServlet

  applicationClassName
  
com.csc.pts.aar.web.application.AarWebApplication.

1
  
  
wicket.wicket
/*
  

  

  MyWeb
  /login
  GET
  POST


  MyWeb

  

  
FORM

 /login
 /loginerror

  

  

  The role that is required to log in to the Manager Application

MyWeb
  



The login.html:

  
  
  

  
  

  

Username:


  
  

Password:


  
  



  

  
  

  
  
  




-
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org