In fact, it gets worse. To perform the athentication, I need parameters from the original URL.
The client will go to http://foo.com/myapp/index.jsp?cic=IBM&srv=bigblue&port=2332 (or sometyhing similar) And the authentication needs the "cic" as the company code, and the "srv" and "port" (as host name and port number) to connect to the back end server to do the authentication. It also must register the connection to the server in the HttpSession for subsequent use. username+password is inadequate!. We need access to the HttpRequest, and HttpSession! View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3912647#3912647 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3912647 ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click _______________________________________________ JBoss-user mailing list JBoss-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jboss-user