Re: j_security_check/j_username/j_password issue in Tomcat Version 6.0.18
I looks like it has changed. I have the same problem getting parameters from this page that have been submitted via a post. However, I think that maybe the answer lies in the valve "org.apache.catalina.authenticator.FormAuthenticator" I'm sure that if you add the you will get to the values in the request. Of course enabling this valve won't cut if for production. --- On Tue, 5/5/09, Sanjay Manchiganti wrote: From: Sanjay Manchiganti Subject: j_security_check/j_username/j_password issue in Tomcat Version 6.0.18 To: users@tomcat.apache.org Date: Tuesday, May 5, 2009, 6:40 PM Hello All, I've deployed two apps(say A and B) into two instances of Tomcat running on port 8080 and 8081. They both have been enabled for form based authentication. Step 1: When a user tries to access the application A he is shown a userid/password page(Alogin.jsp) with all the j_xxx details. Step 2: On entering the details and clicking submit, I've configured the action to take the details and post to the application B which is shown a Blogin.jsp. Step 3: In Blogin.jsp, if I do a request.getParameter("j_username") / request.getParameter("j_password") , I'm getting the values entered by the user in Step 2. Step 4: When I move the "same app" to 6.0.18 I'm getting null values for request.getParameter("j_username") / request.getParameter("j_password"). Did anything change in terms of j_securitycheck / container managed security between these two versions of tomcat? Any input is highly appreciated. Thanks, Sanjay.
RE: j_security_check/j_username/j_password issue in Tomcat Version 6.0.18
> From: Sanjay Manchiganti [mailto:ms4san...@yahoo.com] > Subject: j_security_check/j_username/j_password issue in Tomcat Version > 6.0.18 > > Did anything change in terms of j_securitycheck / container managed > security between these two versions of tomcat? What "two versions"? The only one you mention is 6.0.18; I don't think much changed between 6.0.18 and 6.0.18. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: j_security_check/j_username/j_password issue in Tomcat Version 6.0.18
>>What "two versions"? The version in which I can retrieve the j_username/j_password values is 5.5.27. This doesn't work in version 6.0.18. When using Tomcat Version 6.0.18, I monitored the app using a proxy(Charles Proxy), I see the j_username and j_password in the request but when I do a request.getParameter("j_username") or request.getParameter("j_password") in a jsp I'm getting a null value back. Thanks, Sanjay. From: "Caldarale, Charles R" To: Tomcat Users List Sent: Tuesday, May 5, 2009 10:40:41 PM Subject: RE: j_security_check/j_username/j_password issue in Tomcat Version 6.0.18 > From: Sanjay Manchiganti [mailto:ms4san...@yahoo.com] > Subject: j_security_check/j_username/j_password issue in Tomcat Version > 6.0.18 > > Did anything change in terms of j_securitycheck / container managed > security between these two versions of tomcat? What "two versions"? The only one you mention is 6.0.18; I don't think much changed between 6.0.18 and 6.0.18. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: j_security_check/j_username/j_password issue in Tomcat Version 6.0.18
You should check to see if you are able to get the parameters when the request(s) is send via a "get" vs. a "post". --- On Wed, 5/6/09, Sanjay Manchiganti wrote: From: Sanjay Manchiganti Subject: Re: j_security_check/j_username/j_password issue in Tomcat Version 6.0.18 To: "Tomcat Users List" Date: Wednesday, May 6, 2009, 11:08 AM >>What "two versions"? The version in which I can retrieve the j_username/j_password values is 5.5.27. This doesn't work in version 6.0.18. When using Tomcat Version 6.0.18, I monitored the app using a proxy(Charles Proxy), I see the j_username and j_password in the request but when I do a request.getParameter("j_username") or request.getParameter("j_password") in a jsp I'm getting a null value back. Thanks, Sanjay. From: "Caldarale, Charles R" To: Tomcat Users List Sent: Tuesday, May 5, 2009 10:40:41 PM Subject: RE: j_security_check/j_username/j_password issue in Tomcat Version 6.0.18 > From: Sanjay Manchiganti [mailto:ms4san...@yahoo.com] > Subject: j_security_check/j_username/j_password issue in Tomcat Version > 6.0.18 > > Did anything change in terms of j_securitycheck / container managed > security between these two versions of tomcat? What "two versions"? The only one you mention is 6.0.18; I don't think much changed between 6.0.18 and 6.0.18. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org