Hey!

>... make the directory a protected resource

I am assuming you mean with the webserver basic authentication.
I suggest that a better way of doing authentication is within the
servlet using session objects and a DB to hold User IDs, Passwords
and authority levels for authentication.

Many servlet books, this E-list archive and the Web contain example
code for doing this.

Sans adieu,
Danny Rubis

Alan Himes wrote:

> Hi,
>
> I have an directory of files that i want only certain people to view.
> These people already have user ids and passwords.  I could make the
> directory a protected resource, but  the whole user list would have to
> be entered into the server to allow access to a protected resource and
> the user would be reprompted for a user name and password when they went
> from the main site to the directory.  Would it be possible to write a
> servlet that would authenticate the user, based on his/her current id &
> password, then have the servlet pass a single user id and password from
> the servlet to the server?  has anyone done this before? or have any
> other suggestions.
>
> thanks
> alan
>
> ___________________________________________________________________________
> To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
> of the message "signoff SERVLET-INTEREST".
>
> Archives: http://archives.java.sun.com/archives/servlet-interest.html
> Resources: http://java.sun.com/products/servlet/external-resources.html
> LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

Reply via email to