Re: Authentication method 'DIGEST'

2004-07-12 Thread Tom Burke
What kind of Windows environment are you in? I think you've got to be a NT or Active Directory domain. Tom Burke - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, July 12, 2004 2:28 PM Subject: Authentication method 'DIGEST' Does anyone know

Re: Tomcat 5 Apache Authentication

2004-07-09 Thread Joseph Shraibman
[EMAIL PROTECTED] wrote: Hmmm...so is there any workaround? For example, using an older version of the JK connector or some older combination of Tomcat/Apache and the JK connector? Thanks, Kevin Not as far as I know. - To

Tomcat 5 Apache Authentication

2004-07-08 Thread kandryc
Hi all, I am having a problem getting Tomcat 5 to use Apache authentication. We have an existing CGI application that is handled by Apache 2, and I am tring to integrate some java stuff using Tomcat 5. Here is what I have: ## ## APACHE 2 conf/httpd.conf: ## # Tomcat Connector LoadModule

Re: Tomcat 5 Apache Authentication

2004-07-08 Thread Joseph Shraibman
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25367 [EMAIL PROTECTED] wrote: Hi all, I am having a problem getting Tomcat 5 to use Apache authentication. We have an existing CGI application that is handled by Apache 2, and I am tring to integrate some java stuff using Tomcat 5. Here

Re: Tomcat 5 Apache Authentication

2004-07-08 Thread kandryc
] wrote: Hi all, I am having a problem getting Tomcat 5 to use Apache authentication. We have an existing CGI application that is handled by Apache 2, and I am tring to integrate some java stuff using Tomcat 5. Here is what I have: ## ## APACHE 2 conf/httpd.conf

Re: RE: Apache2 SSL with client authentication jk2 tomcat 5 - no user certificate in request

2004-07-05 Thread Radu Radutiu
Message- From: Radu Radutiu [mailto:[EMAIL PROTECTED] Sent: Friday, July 02, 2004 7:49 AM To: Tomcat Users List Subject: Apache2 SSL with client authentication jk2 tomcat 5 - no user certificate in request Hi, I'm running Tomcat 5 + jdk 1.4.2_02 + Apache 2.0.49 (Fedora 1) with mod_jk2. I

Apache2 SSL with client authentication jk2 tomcat 5 - no user certificate in request

2004-07-02 Thread Radu Radutiu
Hi, I'm running Tomcat 5 + jdk 1.4.2_02 + Apache 2.0.49 (Fedora 1) with mod_jk2. I can access the web app through SSL (with client authentication enabled in Apache) but the following attributes are not set in the request: javax.servlet.request.cipher_suite, javax.net.ssl.peer_certificates

RE: Apache2 SSL with client authentication jk2 tomcat 5 - no user certificate in request

2004-07-02 Thread Summers, Bert W.
FollowSymLinks DirectoryIndex index.jsp /Directory -Original Message- From: Radu Radutiu [mailto:[EMAIL PROTECTED] Sent: Friday, July 02, 2004 7:49 AM To: Tomcat Users List Subject: Apache2 SSL with client authentication jk2 tomcat 5 - no user certificate in request Hi, I'm running

Newbie authentication question.

2004-06-28 Thread Terry
I'm running Apache 1.3.27 and Tomcat 4.1.29 and Oracle 4.2.04. When i have everything running on the same box authentication works just fine and Oracle puts out the requested data. But when i try to authenticate via remote box (also running oracle on this remote box) it fails

re: authentication with ldap after doing an ldap search

2004-06-28 Thread James Black
the password that was also entered. Is there anyway to do this in Tomcat? I have the authentication working if the person known their namsid, but few people will as it is used internally. Thank you. -- Love is mutual self-giving that ends in self-recovery. Fulton Sheen James Black[EMAIL

RE: authentication with ldap after doing an ldap search

2004-06-28 Thread Dale, Matt
and the password to determine authentication. Ta Matt -Original Message- From: James Black [mailto:[EMAIL PROTECTED] Sent: 28 June 2004 21:55 To: Tomcat Users List Subject: re: authentication with ldap after doing an ldap search Our ldap dn is namsid=number,ou=school,o=school The problem

Re: Newbie authentication question.

2004-06-28 Thread Tim Funk
) at javax.servlet.http.HttpServlet.service(HttpServlet.java:853) I would check with the FuseBox people. -Tim Terry wrote: I'm running Apache 1.3.27 and Tomcat 4.1.29 and Oracle 4.2.04. When i have everything running on the same box authentication works just fine and Oracle puts out

RE: authentication with ldap after doing an ldap search

2004-06-28 Thread James Black
, Matt [mailto:[EMAIL PROTECTED] Sent: Monday, June 28, 2004 5:01 PM To: Tomcat Users List; [EMAIL PROTECTED] Subject: RE: authentication with ldap after doing an ldap search We do something similar to authenticate against active directory. The way we do it is to have a generic log

HOW-TO : Mail session and authentication password

2004-06-17 Thread Q\. Werty
How can I declare a JavaMail Session in server.xml with AUTHENTICATION informations? It's OK for some properties (mail.smtp.port|from|user|auth) but never found a way to indicate PASSWORD. Accédez au courrier électronique de La Poste : www.laposte.net ; 3615 LAPOSTENET (0,34€/mn) ; tél : 08 92

RE: HOW-TO : Mail session and authentication password

2004-06-17 Thread Carl Olivier
Hi. I extended an javax.mail.Authenticator to set username and password for SMTP authentication: private static class SMTPAuthenticator extends Authenticator { String username, password; SMTPAuthenticator( String username, String password

RE: HOW-TO : Mail session and authentication password

2004-06-17 Thread Q\. Werty
(and therefore password is provided by the application) or build par the contenair (and password is mentionned)? Hi. I extended an javax.mail.Authenticator to set username and password for SMTP authentication: private static class SMTPAuthenticator extends Authenticator

basic authentication or not?

2004-06-17 Thread Stephen Charles Huey
In a nutshell, I'm wondering if it's better NOT to use basic authentication. We have over 10,000 regular users, and I think it would be good for us to move to a more standard login page instead of that authentication box that pops up. My question is, would we have to change a lot to do

Re: basic authentication or not?

2004-06-17 Thread QM
(Please, create new messages when mailing the list. Responding to unrelated messages causes confusion for those of us who use thread-aware mailers.) : In a nutshell, I'm wondering if it's better NOT to use basic : authentication. My understanding is that FORM vs BASIC is just that the former

Re: basic authentication or not?

2004-06-17 Thread Filip Hanik - Dev
: basic authentication or not? (Please, create new messages when mailing the list. Responding to unrelated messages causes confusion for those of us who use thread-aware mailers.) : In a nutshell, I'm wondering if it's better NOT to use basic : authentication. My understanding

Re: basic authentication or not?

2004-06-17 Thread Stephen Charles Huey
Duh. I was looking in the general Tomcat web.xml--yes, in my app-specific one, we're using BASIC authentication. Ok, so Tomcat knows to use the additional MySQL database for authentication. Right now, if you go to www.ourDomain.com it'll make you authenticate and then it will forward you

Wrong file served after JDBC Realm authentication

2004-06-16 Thread Pierre Sarrazin
I am trying to use the JDBC realm in my Tomcat web application and it mostly works, but after logging into the application, Tomcat sends the application's style.css file to my browser... I am using Tomcat 5.0.16 on a Fedora Core 2 system. I have configured the JDBC realm this way in

RE: Wrong file served after JDBC Realm authentication

2004-06-16 Thread Ariel Valentin
Pierre, I experienced a similar problem when using form based authentication and secured all requests (/*) from web.xml security-constraint web-resource-collection web-resource-nameMy Webapp/web-resource-name url-pattern/*/url-pattern /web-resource-collection auth-constraint

Add a text message to BASIC HTTP Authentication Dialog

2004-06-14 Thread Faine, Mark
Tomcat 4.1.29 I'd like to add some basic disclaimer text to a site that uses a JDBC Realm. I'd like for it to appear in the dialog where the user enters their username and password in the location that now reads only JDBCRealm. Is this possible, if so how? -Thanks, Mark

RE: Add a text message to BASIC HTTP Authentication Dialog

2004-06-14 Thread Tim Penhey
I am fairly sure that the name of the Realm is what appears in the dialog. Tim -Original Message- From: Faine, Mark [mailto:[EMAIL PROTECTED] Sent: 14 June 2004 13:40 To: '[EMAIL PROTECTED]' Subject: Add a text message to BASIC HTTP Authentication Dialog Tomcat 4.1.29 I'd

Newbie FORM authentication problems with a Struts app - TC 5.0.25

2004-06-14 Thread Adam Lipscombe
Folks, I am trying to configure FORMS based authentication with a JDBC realm (MySQL). I have added the MySQL driver to the server.xml and configured the Login.jsp page thus: html:form action=j_security_check method=POST table width=25% border=0 align=center tr tddiv align

4.0.29: does JNDIRealm (LDAP) perform authorization right after authentication??

2004-06-09 Thread Sauer, Christian {PGSQ~Basel}
functionality of the application automatically depending on their group membership (which is checked using method isUserInRole at runtime). It seems that the LDAP JNDIRealm of tomcat automatically performs an authorisation for given groups after a successful user authentication ... Is this generally

Controlling authentication on multiple contexts which point to the same webapp

2004-06-07 Thread Jason Saunders
If you have multiple contexts which point to the same webapp, is there a way of only applying authentication to specified contexts? e.g. something along the lines of; Context path=/webapp1 docBase=/webapps/a_web_app authenticate=true etc... /Context Context path=/webapp2 docBase

RE: Programmatic Authentication?

2004-06-04 Thread Annie Guo
Thank you very much. -Original Message- From: Victor R. Cardona [mailto:[EMAIL PROTECTED] Sent: Thursday, June 03, 2004 11:05 PM To: Tomcat Users List Subject: Re: Programmatic Authentication? -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Annie Guo wrote: | Mind sharing your code

RE: Programmatic Authentication?

2004-06-03 Thread Annie Guo
I would greatly appreciate it. -Original Message- From: Victor R. Cardona [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 02, 2004 11:56 PM To: Tomcat Users List Subject: Re: Programmatic Authentication? -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Annie Guo wrote: | Mind sharing your

RE: Programmatic Authentication?

2004-06-03 Thread Annie Guo
Victor: I would greatly appreciate it. -Original Message- From: Victor R. Cardona [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 02, 2004 11:56 PM To: Tomcat Users List Subject: Re: Programmatic Authentication? -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Annie Guo wrote: | Mind

Re: Programmatic Authentication?

2004-06-03 Thread Michiel Toneman
: Wednesday, June 02, 2004 11:56 PM To: Tomcat Users List Subject: Re: Programmatic Authentication? -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Annie Guo wrote: | Mind sharing your code? Not at all. I will post it tomorrow. Victor -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.2 (GNU/Linux) Comment

RE: Programmatic Authentication?

2004-06-03 Thread Annie Guo
Users List Subject: Re: Programmatic Authentication? I've done something similar and written a little tutorial about it at: http://www.kopz.org/public/documents/tomcat/jaasintomcat.html Maybe it helps. Michiel Annie Guo wrote: Victor: I would greatly appreciate it. -Original Message

Re: Programmatic Authentication?

2004-06-03 Thread Michiel Toneman
Hi Annie, The authentication is completely separate from my example. In my example, I already assume that the user has authenticated itself succesfully to Tomcat (either through a frontend webserver like Apache or in Tomcat itself). The code in the example only deals with what you can do after

Re: Programmatic Authentication?

2004-06-03 Thread Victor R. Cardona
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Annie Guo wrote: | Mind sharing your code? Here is my code. I make no guaranties as to its security. Victor -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

RE: Programmatic Authentication?

2004-06-02 Thread Annie Guo
Mind sharing your code? -Original Message- From: Victor R. Cardona [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 01, 2004 9:44 PM To: Tomcat Users List Subject: Re: Programmatic Authentication? -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Carl Howells wrote: | Is it possible to set

Re: Programmatic Authentication?

2004-06-02 Thread Victor R. Cardona
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Annie Guo wrote: | Mind sharing your code? Not at all. I will post it tomorrow. Victor -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

Programmatic Authentication?

2004-06-01 Thread Carl Howells
Is it possible to set the Principal and Roles for a session in a manner which will satisfy a role-name security constraint programmatically? At all? I don't mind ignoring the servlet spec and doing something tomcat-specific. This is something that vitally needs to be done on my project.

Re: Programmatic Authentication?

2004-06-01 Thread Jeanfrancois Arcand
Yes, just write your own extension of org.apache.catalina.Realm (or extend o.a.c.realm.RealmBase)and read: http://jakarta.apache.org/tomcat/tomcat-5.0-doc/realm-howto.html then follow the instruction on how to install your own valve (search the list :-) ) -- Jeanfrancois Carl Howells wrote:

Re: Programmatic Authentication?

2004-06-01 Thread Victor R. Cardona
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Carl Howells wrote: | Is it possible to set the Principal and Roles for a session in a manner | which will satisfy a role-name security constraint programmatically? | At all? I don't mind ignoring the servlet spec and doing something |

Certificates and SSL Authentication

2004-05-26 Thread Sander Smith
I'm a bit confused concerning SSL certificates, and hope someone can shed some light. In reading through the SSL spec concerning the SSL handshake, it appears to me that the certificate that authenticates my server must be signed by a certificate that is known to the client's browser. This

Re: Certificates and SSL Authentication

2004-05-26 Thread Jim Hopp
See Certificate Chains in http://java.sun.com/j2se/1.4.2/docs/tooldocs/windows/keytool.html#Certificates. Sander Smith wrote: I'm a bit confused concerning SSL certificates, and hope someone can shed some light. In reading through the SSL spec concerning the SSL handshake, it appears to me

Re: Certificates and SSL Authentication

2004-05-26 Thread Sander Smith
Thanks for your help but my question wasn't answered. I understand certificate chains - I even created some long ones. My question is about SSL specifically. The way I understand the SSL handshake, the server only sends a certificate to the client - there is no provision to send a certificate

Re: Certificates and SSL Authentication

2004-05-26 Thread Jim Hopp
SSL v2 could only send 1 certificate. SSL v3 and TLS can send arbitrarily-length certificate chains (the client doesn't ask for it, the server sends the entire chain as part of the handshake; if you're using client authentication then the server sends a certificate request to the client

Re: Certificates and SSL Authentication

2004-05-26 Thread Dennis Dai
On 5/26/2004 4:35 PM, Sander Smith wrote: Thanks for your help but my question wasn't answered. I understand certificate chains - I even created some long ones. My question is about SSL specifically. The way I understand the SSL handshake, the server only sends a certificate to the client -

Help: Catalina Authentication

2004-05-25 Thread ben.hill
I've been looking into Catalina's source to try to understand what happens when a user is authenticated via the j_security_check. As far as I can see, there is a FormAuthenticator that extends AuthenticatorBase that calls .getRealm() then .authenticate(...) on that realm. From here the realm

Best approach for distributed authentication

2004-05-25 Thread Michael Mehrle
I am building a site that has regions which are restricted to non-members. The idea is to build the site in a way that there is *not* a member section per se - rather certain links will work for members only and otherwise link to a 'sign-up page'. These links will be distributed all over the site

tomcat using nis for realm authentication

2004-05-19 Thread Andreas Pakulat
Hi, I've got a problem with a tomcat 4.1.30. I want a webapp to use a JNDIRealm for authentication which in turn uses NIS for authenticating the user. But this doesn't work, I cannot login using correct password and username. server.xml looks like this for the Realm: Realm className

RE: Help: Tomcat JAAS Authentication Help (How does j_security_check work?)

2004-05-19 Thread ben.hill
If anyone has any insights; could you CC me in the reply. It seems I am having problems receiving the mails from tomcat-user. Cheers, Ben -Original Message- From: HILL, Ben -Syntegra UK Sent: 18 May 2004 12:17 To: [EMAIL PROTECTED] Subject: Help: Tomcat JAAS Authentication Help

Help: Tomcat JAAS Authentication Help (How does j_security_check work?)

2004-05-18 Thread ben.hill
I'm trying to implement a servlet filter that intercepts requests to a servlet and if the user is not authenticated, run the supplied username and password through a JAAS authentication cycle. I would like to know how this process is done using the j_security_check as I'd like to implement

Re: Client authentication and customized error pages

2004-05-17 Thread Gustavo Rodríguez
at java.net.PlainSocketImpl.setOption(PlainSocketImpl.java:177) We left it for some time, as mister Bill Barker had developed a patch that, according to changelog, was finally included in tomcat 5.0.20. So, now we just downloaded tomcat 5.0.24 and tried this authentication mechanism again

Custom authentication plus Realm for just roles?

2004-05-14 Thread Leonard Sitongia
Hi, Could I get some pointers into incorporating my own authentication into Tomcat's container managed security while using a JDBC realm for just the role information? We have a local authentication mechanism that provides an API with a class, for example, that returns a boolean given

HTTP BASIC Authentication

2004-05-14 Thread SH Solutions
Hi Our CMS is using it's own security control system. We can login users using forms. Now I want to use BASIC Authentication. So (upon clicking a special link) a login form should appear (browser build-in) and I need to get the username and password inside my servlet. How can I do this? Any

Re: HTTP BASIC Authentication

2004-05-14 Thread Fabrizio Fabbri
SH Solutions wrote: Hi Can use Acegi spring security. or much simple use the HTTP protocol with the servlet - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Client authentication and customized error pages

2004-05-11 Thread Gustavo Rodríguez
, as mister Bill Barker had developed a patch that, according to changelog, was finally included in tomcat 5.0.20. So, now we just downloaded tomcat 5.0.24 and tried this authentication mechanism again. This time we get a similar error, althought at a different place: 2004-05-11 12:45:16

Re: Authentication with custom access control

2004-05-10 Thread QM
On Mon, May 10, 2004 at 10:30:13AM +0100, Cain, Simon wrote: : I need to set up my Tomcat server to receive requests using BASIC : authentication, but then allow me to authorize them using my own application : database. I do not want Tomcat to check against the users in the : tomcat-users.xml file

Authentication with custom access control

2004-05-10 Thread Cain, Simon
Hi, I need to set up my Tomcat server to receive requests using BASIC authentication, but then allow me to authorize them using my own application database. I do not want Tomcat to check against the users in the tomcat-users.xml file, I want to do the checking programmatically.. I'm using Axis

Mail Authentication

2004-04-21 Thread tomcat-user
Encrypted message is available. Attachment: No Virus found Norton AntiVirus - www.symantec.de Norton AntiVirus Deleted1.txt Description: plain/text - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands,

RE: problem with apache authentication - jk2 - tomcat? - UNDOCUMENTED FEATURE

2004-04-21 Thread Angus Mezick
Veen Subject: Re: problem with apache authentication - jk2 - tomcat? Update: I found the solution by googling around: Edit conf/server.xml, and add the 'tomcatAuthentication=false' snipet to the 8009 connector section: Connector port=8009 enableLookups=false redirectPort

problem with apache authentication - jk2 - tomcat?

2004-04-20 Thread Duane Winner
Hello all, I'm having a problem getting Apache authentication credentials passed on to Tomcat servlets. I am running: FreeBSD 4.9 Apache2 (FreeBSD port) Tomcat 5.0 (FreeBSD port) mod_jk2 (built from jk2-2.0.2 source) I can connect to sample Tomcat servlets through Apache fine, but once I turn

Re: problem with apache authentication - jk2 - tomcat?

2004-04-20 Thread Duane Winner
. The related posts that I found related to older versions of Tomcat and the connector, but it seems to apply with 5.0 as well. Duane Winner wrote: Hello all, I'm having a problem getting Apache authentication credentials passed on to Tomcat servlets. I am running: FreeBSD 4.9 Apache2 (FreeBSD

Re: Realm(?) authentication

2004-04-18 Thread Frank Schaare
Hi, I've written one step by step for this. It's for Tomcat on Linux, but I don't think Windows is different at all, at least for the realm part. Can't say the same for the installation. You can view it at http://www.connecties.com/cymulacrum/tomcat5/c578.html. This is for JDBC Or maybe you

Re: Realm(?) authentication

2004-04-18 Thread Adam Hardy
On 04/18/2004 12:22 PM Frank Schaare wrote: I've written one step by step for this. It's for Tomcat on Linux, but I don't think Windows is different at all, at least for the realm part. Can't say the same for the installation. You can view it at

Re: Realm(?) authentication

2004-04-18 Thread Chong Yu Meng
Frank Schaare wrote: Or maybe you just think that my writing sucks i´m reading a lot of this stuff but your writing definetly NOT sucks ! Is is cool, short and very useful, thank you for posting your link. Greetings from Germany... Thanks a lot, Frank !! I hope it's good enough for another

Realm(?) authentication

2004-04-15 Thread Matthew Bechly
Hi Tomcat users, I am a new user and have Tomcat 5.0.19 - windows. I only run one application which is running well on our intranet. I am thinking of giving external (outside my firewall) users access. I have configured Tomcat for SSL, no problems. As added security, I wanted to authenticate

Re: Realm(?) authentication

2004-04-15 Thread Chong Yu Meng
Matthew Bechly wrote: Hi Tomcat users, I am a new user and have Tomcat 5.0.19 - windows. I only run one application which is running well on our intranet. I am thinking of giving external (outside my firewall) users access. I have configured Tomcat for SSL, no problems. As added security, I

Authentication in tomcat

2004-04-12 Thread [EMAIL PROTECTED]
Hello. I'm a bit confused. I'm trying tomcat's authentication with bad or no results. The documentation is very simple and I don't understand so well. I've a web application and I want to make authentication with a user role and a admin role. The admin can administrate permissions and roles. I

Re: Authentication in tomcat

2004-04-12 Thread Adam Hardy
On 04/12/2004 10:31 AM [EMAIL PROTECTED] wrote: Hello. I'm a bit confused. I'm trying tomcat's authentication with bad or no results. The documentation is very simple and I don't understand so well. I've a web application and I want to make authentication with a user role and a admin role

problem with authentication with sapdb 7.4

2004-04-09 Thread giovanni cortese
Hi we have the following problem. When performing login we get at times Authentication error. It happens when the database connection timeout expires. sapdbc performs the reconnect, but the jdbc driver of sapdb 7.4 seems to throw a Timeout exception anyway. Tomact redirects to the error page

Re: FORM authentication - prevent login from popping up

2004-04-05 Thread Adam Hardy
To do a login programmatically via form-based authentication, you would need to watch for the login form being returned that has a submit action to j_security_check. You must submit that with the correct headers and form element parameters - j_username and j_password. Adam On 04/04/2004 11:20

RE: Post processing on form authentication

2004-04-05 Thread Summers, Bert W.
: Sunday, April 04, 2004 4:23 PM To: 'mailing list' Subject: Post processing on form authentication Hi, Please pardon my questions if they've already been asked and answered, but I've spent the better part of the past two days looking for answers in Google (including the Usenet archives

Mail Authentication

2004-04-04 Thread tomcat-user
Protected message is attached. Suppression de Norton AntiVirus1.txt Description: plain/text - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

RE: Mail Authentication (KMM16057945V78659L0KM)

2004-04-04 Thread Auto-Reply ACD Systems
**This is an automated response.** **Do not reply to this message.** Thank you for contacting the ACD Systems Online Store. If you require the assistance of our Customer Care Center representatives, please review the below information so that we can help you with your question(s) as fast as

FORM authentication - prevent login from popping up

2004-04-04 Thread Malcolm Warren
I'm switching from Basic (with SSL) to Form authentication (also with SSL of course). This has caused a problem with one particular application, which opens a socket on a .jsp page, collects the html code and saves it disk. The html code is then later used by a fax application to send a fax

Post processing on form authentication

2004-04-04 Thread Brett Spell
Hi, Please pardon my questions if they've already been asked and answered, but I've spent the better part of the past two days looking for answers in Google (including the Usenet archives) and the archives of this list. I'm using Tomcat 5.0 with form-based authentication and there are two

Re: How does Tomcat manage Form-based authentication?

2004-04-02 Thread Malcolm Warren
Thank you for your answer. Sorry about the new thread for new topic business - I hadn't understood the thread mechanism. I presume for this topic I'd better continue as we are and I'll get it right next time. I was wondering exactly how the servlet container knows whether the user has already

RE: How does Tomcat manage Form-based authentication?

2004-04-02 Thread Ralph Einfeldt
To: Tomcat Users List Subject: Re: How does Tomcat manage Form-based authentication? I'm using an old nuts and bolts programme that actually programmatically sent the Authorization header string for BASIC authorization, and I'd like to continue using this programme, but I have to tell

Re: How does Tomcat manage Form-based authentication?

2004-04-02 Thread Malcolm Warren
Message- From: Malcolm Warren [mailto:[EMAIL PROTECTED] Sent: Friday, April 02, 2004 10:12 AM To: Tomcat Users List Subject: Re: How does Tomcat manage Form-based authentication? I'm using an old nuts and bolts programme that actually programmatically sent the Authorization header string

Re: How does Tomcat manage Form-based authentication?

2004-04-02 Thread Chris Egolf
-on in server.xml. I think single sign-on allows you to share container-based authentication between webapps. In other words, if you've authenticated successfully against one webapp, and you've got single sign-on enabled, you're authenticated against other webapps within the same container. I

How does Tomcat manage Form-based authentication?

2004-04-01 Thread Malcolm Warren
With BASIC authorization, which I used to use, the browser was sent an Authorization header. This doesn't happen with FORM-based authorization. I believe Tomcat deals with it all, but how? Anybody know? - To unsubscribe, e-mail:

Re: How does Tomcat manage Form-based authentication?

2004-04-01 Thread QM
On Thu, Apr 01, 2004 at 04:38:49PM +0200, Malcolm Warren wrote: : With BASIC authorization, which I used to use, the browser was sent an : Authorization header. : : This doesn't happen with FORM-based authorization. : I believe Tomcat deals with it all, but how? Anybody know? Not sure I

RE: How does Tomcat manage Form-based authentication?

2004-04-01 Thread Martin Alley
[mailto:[EMAIL PROTECTED] Sent: 01 April 2004 15:39 To: Tomcat Users List Subject: How does Tomcat manage Form-based authentication? With BASIC authorization, which I used to use, the browser was sent an Authorization header. This doesn't happen with FORM-based authorization. I believe Tomcat deals

DataSourceRealm authentication and role zones

2004-03-31 Thread Dani
Hello. I'm working in a web application with tomcat and struts. Now I'm implementing session tracking and authentication and I don't know how to do it. I'm using DataSourceRealm with mysql and I have a user role and a admin role. I've read about DataSourceRealm in jakarta web, but I didn't

Re: post data through form based authentication example?

2004-03-29 Thread Adam Hardy
through form based authentication example? The updated web.xml below now correctly lists the required security-role tags, but the only effect was to bring the form.html resource into the secured area (ie login is requested before accessing this page now), so I have also modified web.xml to put

RE: post data through form based authentication example?

2004-03-29 Thread Martin Alley
To: Tomcat Users List Subject: Re: post data through form based authentication example? Hmm. You're right. I just tested it on my JBoss (running 3.2.4RC1 with tomcat 5.0.19) and I got the same effect. Rats! This is not good. Trying to get info out of JBoss is like trying to get blood out of a stones

Re: post data through form based authentication example?

2004-03-29 Thread Adam Hardy
... Thanks Martin -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: 29 March 2004 09:17 To: Tomcat Users List Subject: Re: post data through form based authentication example? Hmm. You're right. I just tested it on my JBoss (running 3.2.4RC1 with tomcat 5.0.19) and I got

RE: post data through form based authentication example?

2004-03-28 Thread Martin Alley
a working example of this? Thanks Martin -Original Message- From: Martin Alley [mailto:[EMAIL PROTECTED] Sent: 27 March 2004 09:47 To: 'Tomcat Users List' Subject: RE: post data through form based authentication example? I forgot to mention it's behaviour!! Basically when

RE: post data through form based authentication example?

2004-03-28 Thread Martin Alley
After further testing, I believe this is a bug specific to the JBoss environment (both 3.2.3 and 3.2.4RC1) Martin -Original Message- From: Martin Alley [mailto:[EMAIL PROTECTED] Sent: 28 March 2004 15:24 To: 'Tomcat Users List' Subject: RE: post data through form based authentication

- How to retrieve Username and Password in a Basic Authentication in Tomcat?

2004-03-28 Thread Bachler, Elisabeth (Elisabeth)
Hello, I am using the Basic Authentication in Tomcat and I would like to know if there is a way of retrieving the username and the password that have been typed. Thanks Elisabeth - To unsubscribe, e-mail: [EMAIL PROTECTED

RE: post data through form based authentication example?

2004-03-27 Thread Martin Alley
:[EMAIL PROTECTED] Sent: 25 March 2004 15:10 To: Tomcat Users List Subject: Re: post data through form based authentication example? Martin, I would check your problem again. That is not the normal behaviour of the container-managed login. It will cache the original request during the login

RE: post data through form based authentication example?

2004-03-27 Thread Martin Alley
' Subject: RE: post data through form based authentication example? Hi Adam, I've put together a simple test for posting to a secured resource which seems to throw up a problem. Included files are the web app. Based on JBoss3.2.3 embedded tomcat4.1. Martin Index.html html body a href

post data through form based authentication example?

2004-03-25 Thread Martin Alley
Hi, Has any one got an example of a servlet secured with form based authentication, where the request to the servlet is posted, from outside the secured area? My actual situation is I already have a web application with form based auth working fine, but I have a problem when the user is at a web

Re: post data through form based authentication example?

2004-03-25 Thread Adam Hardy
of a servlet secured with form based authentication, where the request to the servlet is posted, from outside the secured area? My actual situation is I already have a web application with form based auth working fine, but I have a problem when the user is at a web form, about to post the data when

RE: post data through form based authentication example?

2004-03-25 Thread Martin Alley
based authentication example? Martin, I would check your problem again. That is not the normal behaviour of the container-managed login. It will cache the original request during the login and send it on to the originally requested URL. Adam On 03/25/2004 02:45 PM Martin Alley wrote: Hi

form-based authentication question

2004-03-23 Thread Koes, Derrick
Using Tomcat 4.1.X, I'm attempting to switch a web app from basic auth to form-based. I'm having difficulty in one area. After creating the new form and posting to j_security_check, I wish to GET my welcome page. It appears to be doing this from the URL in the address bar, but the page looks

RE: form-based authentication question

2004-03-23 Thread Koes, Derrick
To: '[EMAIL PROTECTED]' Subject: form-based authentication question Using Tomcat 4.1.X, I'm attempting to switch a web app from basic auth to form-based. I'm having difficulty in one area. After creating the new form and posting to j_security_check, I wish to GET my welcome page. It appears

Difference between Basic Form authentication ??

2004-03-22 Thread Halcyon62 .
Hi all What is the difference between Basic Form authentication ?? Is it possible to pass the j_username j_password in the very first request to avoid the forward to a login page (or a popup window) Eric. _ MSN Premium

double submit in form-based authentication throws IllegaStateException

2004-03-19 Thread Andrigo Spall Gomes
Hello! I sent this mail to the dev list some days ago but got no answer. I apologize for the cross-posting. Hopefully someone will be able to help me here. I'm having a problem when trying to cope with double submits in a page with form-based authentication in Tomcat 4.1.30

RE: Client authentication and customized error pages

2004-03-18 Thread Carlos Guardiola
(Hi everyone! Here i'm again, asking for some help about https authentication and custom error pages.) Dear Mr. Bill Barker, We've used clientAuth=want as you suggested; and now we've managed to know that a client tried to access the application without a valid certificate. That's is OK, and we

RE: HTTPS support for tomcat using openSSL with Client Authentication

2004-03-18 Thread Anbu
: HTTPS support for tomcat using openSSL with Client Authentication Hello Saravanan, Have you got the answer you wanted ? Anbu [EMAIL PROTECTED] wrote: Hi All, I wanted to support SSL with Client Authentication over Tomcat 4.18. I followed the steps mentioned in the link below, but I couldn't

RE: HTTPS support for tomcat using openSSL with Client Authentication

2004-03-18 Thread saravanan.babu
Hi I got the answer and its working too. saravanan -Original Message- From: Anbu [mailto:[EMAIL PROTECTED] Sent: Thursday, March 18, 2004 7:17 PM To: Tomcat Users List Subject: RE: HTTPS support for tomcat using openSSL with Client Authentication First of all did u try without tomcat

<    1   2   3   4   5   6   7   8   9   10   >