I would assume that the authentication is all or nothing.  Why not
just have Apache handle the authentication, and grab the username from the
environment?

On Mon, 7 Aug 2000, Geeta Ramani wrote:

> Jake:
>
> You could maybe use a session variable: set it when the person authenticates and
> check for it when the person accesses the page.
>
> geeta
>
> Jake Brain wrote:
>
> > Hi all,
> >  I want to protect my site using Basic Authentication. I have a form log in
> > that goes to log in servlet, authenticates against ldap, if valid, creates a
> > session, and lets the user in. In this situation,  I was wondering if there
> > is way that I can then tell Apache this guy has authenticated so don't
> > respond with a www=authenticate header when he tries to access a protected
> > page. Any thoughts or ideas would be appreciated. Regards, Jake the Snake
> >
> > ___________________________________________________________________________
> > To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
> > of the message "signoff SERVLET-INTEREST".
> >
> > Archives: http://archives.java.sun.com/archives/servlet-interest.html
> > Resources: http://java.sun.com/products/servlet/external-resources.html
> > LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
>

___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

Reply via email to