RE: form-based login on a BEA weblogic server 6.1

2002-06-11 Thread Jon.Ridgway

Hi Koen,

When we have done this using WebLogic and Struts we did not have an action
mapping for the login. If you do have one it should *not* point to the login
page, but rather the page you would like to go to after login (assuming it
is a secured page).

Your default (or post login) jsp/html page should just point to an area that
is secured in your web.xml. WebLogic will then forward automatically to your
login page, authenticate and finish by forwarding back to the default
jsp/html page. 

Hope this helps.

Jon Ridgway

-Original Message-
From: Koen Puttevils [mailto:[EMAIL PROTECTED]] 
Sent: 11 June 2002 11:35
To: Struts Users Mailing List
Subject: form-based login on a BEA weblogic server 6.1


Hello,

I'm trying to use a form-based login on a Bea WLS 6.1. Is there anyone
who has experience with this using struts??
I don't know exactly how to set the actionmapping, because BEA wants the
action of the form pointing to j_security_check.
Does anyone has a working example for this problem?

Thanks

--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]

The contents of this email are intended only for the named addressees and
may contain confidential and/or privileged material. If received in error
please contact UPCO on +44 (0) 113 201 0600 and then delete the entire
e-mail from your system. Unauthorised review, distribution, disclosure or
other use of this information could constitute a breach of confidence. Your
co-operation in this matter is greatly appreciated. 

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Re: form-based login on a BEA weblogic server 6.1

2002-06-11 Thread @Basebeans.com

Subject: Re: form-based login on a BEA weblogic server 6.1
From: Vic C. [EMAIL PROTECTED]
 ===
http://edocs.bea.com/wls/docs61/webapp/web_xml.html
Click on security.

Koen Puttevils wrote:
 Hello,
 
 I'm trying to use a form-based login on a Bea WLS 6.1. Is there anyone
 who has experience with this using struts??
 I don't know exactly how to set the actionmapping, because BEA wants the
 action of the form pointing to j_security_check.
 Does anyone has a working example for this problem?
 
 Thanks
 
 --
 To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
 For additional commands, e-mail: mailto:[EMAIL PROTECTED]
 


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Re: form-based login on a BEA weblogic server 6.1

2002-06-11 Thread @Basebeans.com

Subject: Re: form-based login on a BEA weblogic server 6.1
From: C. Allen Sher [EMAIL PROTECTED]
 ===
Quick question:

Does this arrangement tie your app to WebLogic, or is it still deployable
to, say, Tomcat?




Jon.Ridgway [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]...
 Hi Koen,

 When we have done this using WebLogic and Struts we did not have an action
 mapping for the login. If you do have one it should *not* point to the
login
 page, but rather the page you would like to go to after login (assuming it
 is a secured page).

 Your default (or post login) jsp/html page should just point to an area
that
 is secured in your web.xml. WebLogic will then forward automatically to
your
 login page, authenticate and finish by forwarding back to the default
 jsp/html page.

 Hope this helps.

 Jon Ridgway

 -Original Message-
 From: Koen Puttevils [mailto:[EMAIL PROTECTED]]
 Sent: 11 June 2002 11:35
 To: Struts Users Mailing List
 Subject: form-based login on a BEA weblogic server 6.1


 Hello,

 I'm trying to use a form-based login on a Bea WLS 6.1. Is there anyone
 who has experience with this using struts??
 I don't know exactly how to set the actionmapping, because BEA wants the
 action of the form pointing to j_security_check.
 Does anyone has a working example for this problem?

 Thanks

 --
 To unsubscribe, e-mail:
 mailto:[EMAIL PROTECTED]
 For additional commands, e-mail:
 mailto:[EMAIL PROTECTED]

 The contents of this email are intended only for the named addressees and
 may contain confidential and/or privileged material. If received in error
 please contact UPCO on +44 (0) 113 201 0600 and then delete the entire
 e-mail from your system. Unauthorised review, distribution, disclosure or
 other use of this information could constitute a breach of confidence.
Your
 co-operation in this matter is greatly appreciated.

 --
 To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
 For additional commands, e-mail:
mailto:[EMAIL PROTECTED]




--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: form-based login on a BEA weblogic server 6.1

2002-06-11 Thread Tero P Paananen

 I'm trying to use a form-based login on a Bea WLS 6.1. Is there anyone
 who has experience with this using struts??
 I don't know exactly how to set the actionmapping, because 
 BEA wants the
 action of the form pointing to j_security_check.
 Does anyone has a working example for this problem?

Do you need to have your own login functionality?

If so, you're going to have to kludge. Otherwise follow the advice
from another poster that said to point your default page to a protected
JSP page and you should be fine.

The only cross-platform solution that we came up with that worked
half decently while working on the same problem with WebSphere
was to have our login action forward to a JSP page that contains a
hidden HTML form with j_username and j_password calling
j_security_check. The hidden form is automatically submitted
by a JavaScript function when the page has finished loading.

If you do this, you have to make sure you set the redirecting
URL for j_security_check correctly in your login action, so that
WebLogic knows where to redirect after execution of j_security_check
is complete. WebSphere uses a cookie for setting it, Tomcat uses
a session attribute and I have no idea what WebLogic uses for it.

-TPP

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: form-based login on a BEA weblogic server 6.1

2002-06-11 Thread Koen Puttevils

This will tie the app to weblogic. What means, the login-procedure is
specific for weblogic.

-Original Message-
From: Struts Newsgroup [mailto:@[EMAIL PROTECTED]]
Sent: Tuesday, June 11, 2002 4:55 PM
To: [EMAIL PROTECTED]
Subject: Re: form-based login on a BEA weblogic server 6.1


Subject: Re: form-based login on a BEA weblogic server 6.1
From: C. Allen Sher [EMAIL PROTECTED]
 ===
Quick question:

Does this arrangement tie your app to WebLogic, or is it still
deployable
to, say, Tomcat?




Jon.Ridgway [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]...
 Hi Koen,

 When we have done this using WebLogic and Struts we did not have an
action
 mapping for the login. If you do have one it should *not* point to the
login
 page, but rather the page you would like to go to after login
(assuming it
 is a secured page).

 Your default (or post login) jsp/html page should just point to an
area
that
 is secured in your web.xml. WebLogic will then forward automatically
to
your
 login page, authenticate and finish by forwarding back to the default
 jsp/html page.

 Hope this helps.

 Jon Ridgway

 -Original Message-
 From: Koen Puttevils [mailto:[EMAIL PROTECTED]]
 Sent: 11 June 2002 11:35
 To: Struts Users Mailing List
 Subject: form-based login on a BEA weblogic server 6.1


 Hello,

 I'm trying to use a form-based login on a Bea WLS 6.1. Is there anyone
 who has experience with this using struts??
 I don't know exactly how to set the actionmapping, because BEA wants
the
 action of the form pointing to j_security_check.
 Does anyone has a working example for this problem?

 Thanks

 --
 To unsubscribe, e-mail:
 mailto:[EMAIL PROTECTED]
 For additional commands, e-mail:
 mailto:[EMAIL PROTECTED]

 The contents of this email are intended only for the named addressees
and
 may contain confidential and/or privileged material. If received in
error
 please contact UPCO on +44 (0) 113 201 0600 and then delete the entire
 e-mail from your system. Unauthorised review, distribution, disclosure
or
 other use of this information could constitute a breach of confidence.
Your
 co-operation in this matter is greatly appreciated.

 --
 To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
 For additional commands, e-mail:
mailto:[EMAIL PROTECTED]




--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: form-based login on a BEA weblogic server 6.1

2002-06-11 Thread Tero P Paananen

 This will tie the app to weblogic. What means, the
 login-procedure is specific for weblogic.

No it won't.

The behavior described in Jon Ridgway's post is vanilla
Servlet Spec 2.2 behavior and will work on any compliant
servlet container.

-TPP

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]