invalidate() should log oneself out of a session.

The source to
org.apache.catalina.authenticator.FormAuthenticator
would probably have the answer.

-Tim

Christian J. Dechery - ACCENTURE wrote:
yeah, I tought of that... I haven't tried invalidate(), but I watched the
session data after the user is authenticated, and it's EMPTY, there's
nothing... where's the user data? Is it hidden??

_______________________________
:: Christian J. Dechery
:: Accenture do Brasil
:: CHT - Solutions Operations
:: [EMAIL PROTECTED]



-----Mensagem original-----
De: Tim Funk [mailto:[EMAIL PROTECTED]
Enviada em: quarta-feira, 16 de julho de 2003 14:58
Para: Tomcat Users List
Assunto: Re: RES: Querying container's user database


If all the auth data is in the session (with FORM based auth it usually is) - then invalidate the session via session.invalidate()


-Tim

Christian J. Dechery - ACCENTURE wrote:

So I'm screwed? hehehehe

I don't know if u've seen my post about logging off container's
authenticated users. Can u please check it out, U seem to

know about the


subject. Thanks

_______________________________
:: Christian J. Dechery
:: Accenture do Brasil
:: CHT - Solutions Operations
:: [EMAIL PROTECTED]




-----Mensagem original-----
De: Tim Funk [mailto:[EMAIL PROTECTED]
Enviada em: quarta-feira, 16 de julho de 2003 14:21
Para: Tomcat Users List
Assunto: Re: Querying container's user database


Its container specific. Also to do so - the Realm would have to provide that ability - so even this is Realm specfic too.


http://jakarta.apache.org/tomcat/tomcat-4.1-doc/realm-howto.html

And to top if off - You app will need to be be a "privledged" webapp so it may see the catalina internals. (which is where realms live)

-Tim


Christian J. Dechery - ACCENTURE wrote:



Is there a way I can query the container's user database to

find out if a



specifed login exists or not??

If yes, is the solution container-specific?



------------------------------------------------------------

---------


To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




---------------------------------------------------------------------

To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to