Re: [Acegisecurity-developer] contacts example with basic authentication only ?

2007-11-08 Thread Ray Krueger
You know, I think that responsibility may have been moved to the exceptionTranslationFilter. That's probably not very clear... Look at what entryPoints you have and look how they're being used. On Nov 8, 2007 5:42 AM, <[EMAIL PROTECTED]> wrote: > > I looked inside the acegi-security-sample-conta

Re: [Acegisecurity-developer] contacts example with basic authentication only ?

2007-11-08 Thread Ray Krueger
The last filter in the chain is the securityEnforcementFilter. That filter is configured with an EntryPoint. It is the EntryPoints responsibility to challenge the caller if they did not present credentials that one of the previous filters understands. The BasicProcessingFilter is there to authenti

Re: [Acegisecurity-developer] contacts example with basic authentication only ?

2007-11-08 Thread Dirk . Dinger
I needed to change the authenticationEntryPoint property of the ExceptionTranslationFilter bean in order to make it work. Thanks a lot Ray !- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to

Re: [Acegisecurity-developer] contacts example with basic authentication only ?

2007-11-08 Thread Dirk . Dinger
I looked inside the acegi-security-sample-contacts-filter.war that came with acegi 1.0.4 the filter chain in applicationContext-acegi-security.xml is defined as follows: CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON PATTERN_TYPE_APA

[Acegisecurity-developer] contacts example with basic authentication only ?

2007-11-08 Thread Dirk . Dinger
Hi acegi users, maybe someone of you knows the trick What do I have to change in the "contacts" sample application in order to enforce basic authentication only ? if I remove the "authenticationProcessingFilter" from the filter chain and keep "basicProcessingFilter" only it does not have t

Re: [Acegisecurity-developer] contacts example with basic authentication only ?

2007-11-08 Thread Ray Krueger
No problem, glad I could help. That's the trick to remember with Acegi that I think people misunderstand. The filters that actually handle credentials, like the BasicProcessingFilter, AuthenticationProcessingFilter, DigestProcessingFilter only do anything when the credentials are presented. An ent

[Acegisecurity-developer] J2EE pre-authenticated authentication provider

2007-11-08 Thread Ruud Senden
Hello, In our company the IT security policy is to place all applications behind IBM WebSeal. The applications themselves need to be based on J2EE security as provided by IBM WebSphere. The use of Acegi Security is somewhat limited in such an environment, as authentication and parts of authorizati

[Acegisecurity-developer] Anthony W Ryan is out of the office.

2007-11-08 Thread anthony . w . ryan
I will be out of the office starting Thu 08/11/2007 and will not return until Mon 12/11/2007. I will respond to your message when I return. If your query is urgent please contact Philip Callanan at [EMAIL PROTECTED] Thank you, Anthony Ryan

Re: [Acegisecurity-developer] how to get online users list from acegi ????

2007-11-08 Thread Mohammad Shamsi
hi all, yes scott, i want get a list of users currently on my system i saw the code, i wrote something like it, but i thought that acegi has some feature for this thank you. On Nov 8, 2007 2:00 AM, Scott McCrory <[EMAIL PROTECTED]> wrote: > Or does he mean to get a list of users currently on h

Re: [Acegisecurity-developer] how to get online users list from acegi ???? (Ray Krueger)

2007-11-08 Thread Axel Mendoza Pupo
String users [] = (String[])SessionRegistry.getAllPrincipals(); List online; for(int i=0;i> http://get.splunk.com/ ___ Home: http://acegisecurity.org Acegisecurity-developer mailing list Acegisecurity-develo

[Acegisecurity-developer] Is siteminderUsernameHeaderKey always SM_USER?

2007-11-08 Thread Daniel Jue
Hi, I am new to acegi-siteminder integration. I've had acegi working in my app for some time, but it's always been using a form. Now I want to integrate with an existing Siteminder service. Here are the changes I want to make: 1) My application will no longer need to provide an authentication (l