Re: [Acegisecurity-developer] Newbie problem

2004-07-08 Thread Andy Depue
Yeah, I've gotten around the issue for now by using redirect - but will need to look at it again soon. I'll see if CVS HEAD provides more functionality. Basically, our app provides different "user spaces". When a user logs in, they must provide both a user space and a username (usernames need

Re: [Acegisecurity-developer] CasAuthenticationProvider taking advantage of custom Authentication object?

2004-07-08 Thread Ben Alex
Hi Mike [EMAIL PROTECTED] wrote: I'm using cas for authentication and I'd like to be able to take advantage of the new UserDetails inteface on the client side. Correct me if I'm wrong but if I were using the DaoAuthenticationProvider I'd simply overload the createSuccessAuthentication to return m

Re: [Acegisecurity-developer] Newbie problem

2004-07-08 Thread Ben Alex
Andy Depue wrote: I solved my problem by not using encoded passwords - now everything is working as expected... this will work during development, but won't be an option when we deploy. It appears that my version of Acegi has a bug concerning encoded passwords (see my previous post for details)

Re: [Acegisecurity-developer] Password getting encoded twice over

2004-07-08 Thread Andy Depue
OK, I did some searching around (gmane, cvs) and discovered that this bug had been discovered and fixed after 0.51 (the release I'm using). Sorry for all the noise. :-) - Andy On Thursday 08 July 2004 02:36 pm, Andy Depue wrote: > It appears that when DaoAuthenticationProvider creates a >

Re: [Acegisecurity-developer] Newbie problem

2004-07-08 Thread Andy Depue
I solved my problem by not using encoded passwords - now everything is working as expected... this will work during development, but won't be an option when we deploy. It appears that my version of Acegi has a bug concerning encoded passwords (see my previous post for details). --

[Acegisecurity-developer] Password getting encoded twice over

2004-07-08 Thread Andy Depue
It appears that when DaoAuthenticationProvider creates a UsernamePasswordAuthenticationToken, it passes in the password from the User object returned from the DAO. This password is coming straight from the DB in my case, and is already SHA encoded. So, we now have a authentication token that

Re: [Acegisecurity-developer] Newbie problem

2004-07-08 Thread Andy Depue
One of the things that could help me diagnose this problem is if SecurityEnforcementFilter would log a stack trace of AuthenticationException when it catches it (see Acegi v 0.51 SecurityEnforcementFilter.java line 170). Right now, the source exception is completely discarded - making it diffi

[Acegisecurity-developer] CasAuthenticationProvider taking advantage of custom Authentication object?

2004-07-08 Thread youngm
I'm using cas for authentication and I'd like to be able to take advantage of the new UserDetails inteface on the client side. Correct me if I'm wrong but if I were using the DaoAuthenticationProvider I'd simply overload the createSuccessAuthentication to return my custom Authentication object th

[Acegisecurity-developer] Newbie problem

2004-07-08 Thread Andy Depue
I'm a newbie to acegi-security and am running into a problem (probably something stupid on my end). Anyway, I have a page that is protected. The definition in my FilterSecurityInterceptor goes something like this: /rcp/launchhr.jsp=ROLE_HUMANRESOURCES Ok, so I attempt to access the page and a

[Acegisecurity-developer] AuthenticationProcessingFilter and jsp:forward

2004-07-08 Thread Andy Depue
Hello, Before I go and figure this out myself, I thought I'd poll the collective wisdom of this maillist. :-) Anyway, I would like to perform some processing on the values the user enters on the login form before passing the info off to AuthenticationProcessingFilter. I thought to myself, "n