I'm not sure you're supposed to be able to get it. Also, what would you expect to get if the password was hashed?

Can you not just read the password from the database / ldap source?

Digby


Larry Meadors wrote:
The principle may contain it, but you would have to get it via
reflection or cast it to it's original type to see it.

Larry


On 6/2/05, Jo <[EMAIL PROTECTED]> wrote:

Hi all,

Once Tomcat has authenticated a login, we can get the the authenticated
user's name from the request's getRemoteUser() or getUserPrincipal()
methods.
Is there a way to get the user's password when the authentication type is
form-based or single-sign-on ?

Thanks a lot.
Jo.-


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to