Jetspeed Security vs. Turbine Security

2002-07-29 Thread Aaron Oneal
Hello, I have been looking over the group support provided by Turbine vs. Jetspeed, and I am not clear on the direction Jetspeed is heading in that area, so I was hoping someone might be able to clarify. It seems that in Jetspeed, users can belong to a group, and this has nothing to do with

RE: Jetspeed Security vs. Turbine Security

2002-07-29 Thread David Sean Taylor
Aaron, We implement a Turbine-like services. The database schema is the same, but the Turbine services are no longer used. I understand your needs for having the group/role/user relationship. However I found this relationship to be overcomplicated in most cases and chose not to implement the

Custom Security Authentication

2002-07-29 Thread Werner Ramaekers
Hey, i'm trying to create my own custom Authentication class because i need to Authenticate the user's password against a hardware token Controller. This means i need to verify the password presented by the users which was generated by his token against the Controller for whic i know the API.

RE: Custom Security Authentication

2002-07-29 Thread David Sean Taylor
Sounds like the confirmed string is null. String confirmed = data.getUser().getConfirmed(); if (confirmed == null || !confirmed.equals(JetspeedResources.CONFIRM_VALUE )) { if ( confirmed.equals(JetspeedResources.CONFIRM_VALUE_REJECTED))

cvs commit: jakarta-jetspeed/src/java/org/apache/jetspeed/modules/actions JLoginUser.java

2002-07-29 Thread taylor
taylor 2002/07/29 11:51:18 Modified:src/java/org/apache/jetspeed/modules/actions JLoginUser.java Log: - Patch to check for null pointed out by Werner Ramaekers [[EMAIL PROTECTED]] Revision ChangesPath 1.26 +1 -1

Re: Custom Security Authentication

2002-07-29 Thread Werner Ramaekers
great David, that fixed it ! David Sean Taylor wrote: Sounds like the confirmed string is null. String confirmed = data.getUser().getConfirmed(); if (confirmed == null || !confirmed.equals(JetspeedResources.CONFIRM_VALUE )) { if (

RE: Jetspeed Security vs. Turbine Security

2002-07-29 Thread Aaron Oneal
Thanks David, I'll have a look at what it would take to extend Jetspeed to have this functionality. I am a little concerned that the changes might go beyond just writing a new security implementation class and require me to alter the way portlets and portals are handled as well. I'll do a little

cvs commit: jakarta-jetspeed/src/java/org/apache/jetspeed/portal/controllers VelocityPanedPortletController.java

2002-07-29 Thread ggolden
ggolden 2002/07/29 19:07:59 Modified:webapp/WEB-INF/psml/group/apache/html default.psml webapp/WEB-INF/psml/role/admin/html default.psml webapp/WEB-INF/psml/role/user/html default.psml webapp/WEB-INF/psml/user/anon/html default.psml

cvs commit: jakarta-jetspeed/src/java/org/apache/jetspeed/modules/actions JLoginUser.java

2002-07-29 Thread taylor
taylor 2002/07/29 19:44:32 Modified:src/java/org/apache/jetspeed/modules/actions JLoginUser.java Log: - Fixed bug with refresh pressed immediately after loggin in (resubmit params) Revision ChangesPath 1.27 +4 -1

cvs commit: jakarta-jetspeed/webapp/WEB-INF/conf JetspeedSecurity.properties

2002-07-29 Thread taylor
taylor 2002/07/29 22:45:21 Modified:src/java/org/apache/jetspeed/modules/actions JLoginUser.java webapp/WEB-INF/conf JetspeedSecurity.properties Log: - Removing check for relogon altogether. After checking the logic and running tests, it appears it isn;t necessary