WIth those restrictions, I would dump container based authorization and rely on filters. Your webapp would then be portable for other containers as well as non-dependent on tomcat internals.

-Tim

Damian Minkov wrote:

Hello Tim,

Tuesday, September 30, 2003, 2:05:20 PM, you wrote:

TF> Can you just change the username to be [EMAIL PROTECTED] or username/group and TF> then write a custom Realm on that. Custom Realms == easy to write. Custom TF> authenticator Valves == PITA.

TF> Look for any Bill Barker posts in the archives with Authenticator for more TF> information about writing custom ones.

TF> -Tim

TF> Damian Minkov wrote:


For 2 weeks I'm fighting with the authentication in Tomcat.

Is it possible to make it authenticate the user with 3 params.
For example username, password, and group belongs to.
I need the third one because the roles of the user are different for
different groups.

I tried to make my own Valve and realm and to use the Valve as
authenticator but I can't get it work.




TF> --------------------------------------------------------------------- TF> To unsubscribe, e-mail: [EMAIL PROTECTED] TF> For additional commands, e-mail: [EMAIL PROTECTED]

No I can't make it this way beacuse i have a to step login page
First step : username and password
Second step : choose group /
                     the groups you choose from are loaded
                     according the username
And this two steps doesn't allow me to make it this way.




---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to