DO NOT REPLY [Bug 25953] - Add ability for Realm authentication to tell the user the reason for auth failure

2004-01-30 Thread bugzilla
gzilla/show_bug.cgi?id=25953 Add ability for Realm authentication to tell the user the reason for auth failure --- Additional Comments From [EMAIL PROTECTED] 2004-01-30 09:45 --- Yep, that's obviously a case where you would be reducing security by handing the potential hacker informati

DO NOT REPLY [Bug 25953] - Add ability for Realm authentication to tell the user the reason for auth failure

2004-01-29 Thread bugzilla
gzilla/show_bug.cgi?id=25953 Add ability for Realm authentication to tell the user the reason for auth failure --- Additional Comments From [EMAIL PROTECTED] 2004-01-29 23:23 --- For the record, the design of the Realm API in this regard was intentional. Telling your user that they g

DO NOT REPLY [Bug 25953] - Add ability for Realm authentication to tell the user the reason for auth failure

2004-01-29 Thread bugzilla
gzilla/show_bug.cgi?id=25953 Add ability for Realm authentication to tell the user the reason for auth failure [EMAIL PROTECTED] changed: What|Removed |Added Stat

Re: Add ability for Realm authentication to tell the user the reason for auth failure

2004-01-29 Thread Remy Maucherat
[Carlos H.] wrote: On Friday 23 January 2004 20:59, Remy Maucherat wrote: - 26236 about the JAAS realm: it would be a very useful fix, and shouldn't be too complex Well... I've tried to reproduce the bug... I've created my own LoginModule, and two classes wich implements de java.security.Princi

Re: Add ability for Realm authentication to tell the user the reason for auth failure

2004-01-28 Thread [Carlos H.]
On Friday 23 January 2004 20:59, Remy Maucherat wrote: > - 26236 about the JAAS realm: it would be a very useful fix, and > shouldn't be too complex Well... I've tried to reproduce the bug... I've created my own LoginModule, and two classes wich implements de java.security.Principal interface (on

Re: Add ability for Realm authentication to tell the user the reason for auth failure

2004-01-23 Thread Remy Maucherat
[Carlos H.] wrote: Hi all, First of all: My name is Carlos and I'm new here. (I have entered the list a few days ago) And I'm still trying to understand the tomcat source code... oh... and I'm not from USA...my english is not perfect, but I hope I can be usefull anyway ;) I was looking f

Add ability for Realm authentication to tell the user the reason for auth failure

2004-01-23 Thread [Carlos H.]
Hi all, First of all: My name is Carlos and I'm new here. (I have entered the list a few days ago) And I'm still trying to understand the tomcat source code... oh... and I'm not from USA...my english is not perfect, but I hope I can be usefull anyway ;) I was looking for something to work

DO NOT REPLY [Bug 25953] New: - Add ability for Realm authentication to tell the user the reason for auth failure

2004-01-07 Thread bugzilla
gzilla/show_bug.cgi?id=25953 Add ability for Realm authentication to tell the user the reason for auth failure Summary: Add ability for Realm authentication to tell the user the reason for auth failure Product: Tomcat 5 Version: 5.0.16 Pl