Hey!
>... make the directory a protected resource
I am assuming you mean with the webserver basic authentication.
I suggest that a better way of doing authentication is within the
servlet using session objects and a DB to hold User IDs, Passwords
and authority levels for authentication.
Many servlet books, this E-list archive and the Web contain example
code for doing this.
Sans adieu,
Danny Rubis
Alan Himes wrote:
> Hi,
>
> I have an directory of files that i want only certain people to view.
> These people already have user ids and passwords. I could make the
> directory a protected resource, but the whole user list would have to
> be entered into the server to allow access to a protected resource and
> the user would be reprompted for a user name and password when they went
> from the main site to the directory. Would it be possible to write a
> servlet that would authenticate the user, based on his/her current id &
> password, then have the servlet pass a single user id and password from
> the servlet to the server? has anyone done this before? or have any
> other suggestions.
>
> thanks
> alan
>
> ___________________________________________________________________________
> To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
> of the message "signoff SERVLET-INTEREST".
>
> Archives: http://archives.java.sun.com/archives/servlet-interest.html
> Resources: http://java.sun.com/products/servlet/external-resources.html
> LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".
Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html