Automatic authentication when accessing a servlet ?????????

2004-03-18 Thread Halcyon62 .
Hi Is it possible to incorporate the j_username j_password (used by the servlet j_security_check) in the request to authenticate the caller and then, grant access to the servlet that i am trying to access ? I explain the context: I have a servlet that allows the caller to download of log

Re: Automatic authentication when accessing a servlet ?????????

2004-03-18 Thread Parsons Technical Services
Is this for a few users or a bunch? If it is a few users then HTTPS Client authentication may work. But more likely what will fit your plan is to use form authentication. If you are getting a prompt for name and password then you are using basic authentication. See SRV .12.5 in the Servlet 2.4

Re: Automatic authentication when accessing a servlet ?????????

2004-03-18 Thread Halcyon62 .
It's for administration stuff. Then there is not a lot of possible users. I am using the form authentication, but I think I was not clear when I said that Tomcat popups up a page... in fact, Tomcat redirect to my login page. No popup is displayed... here is only the login-config (from web.xml

Re: Automatic authentication when accessing a servlet ?????????

2004-03-18 Thread Justin Ruthenbeck
. Then there is not a lot of possible users. I am using the form authentication, but I think I was not clear when I said that Tomcat popups up a page... in fact, Tomcat redirect to my login page. No popup is displayed... here is only the login-config (from web.xml) the security-constraint part is set

Re: Client authentication and customized error pages

2004-03-18 Thread Bill Barker
Carlos Guardiola [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] (Hi everyone! Here i'm again, asking for some help about https authentication and custom error pages.) Dear Mr. Bill Barker, We've used clientAuth=want as you suggested; and now we've managed to know that a client

Timeout or log out for Realm authentication

2004-03-17 Thread Joan Jesús Pujol Espinar
Hello, Is it possible to set a timeout or manually logout a user that is authenticated with a realm? Because the user is always 'logged' until the navigator is closed. Cheers, -- *** Joan Jesús Pujol Espinar Tècnic de Sistemes Universitat de

Re: HTTPS support for tomcat using openSSL with Client Authentication

2004-03-17 Thread Anbu
Hello Saravanan, Have you got the answer you wanted ? Anbu [EMAIL PROTECTED] wrote: Hi All, I wanted to support SSL with Client Authentication over Tomcat 4.18. I followed the steps mentioned in the link below, but I couldn't succeed in getting the client authentication to work,however I

RE: HTTPS support for tomcat using openSSL with Client Authentication

2004-03-17 Thread saravanan.babu
Still I am looking in to it. If you have any idea please let me know. Regards saravanan -Original Message- From: Anbu [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 17, 2004 7:38 PM To: Tomcat Users List Subject: Re: HTTPS support for tomcat using openSSL with Client Authentication

Re: Tomcat Realm Authentication + Storing Objects In The Session

2004-03-11 Thread Adam Hardy
On 03/11/2004 08:56 AM Ronald Wildenberg wrote: My biggest unknown right now is, because the server handles the creation of the session, what would it take to make the server grab a user object from the database and store it in the session after the user logs in? Can't you use an

HTTPS support for tomcat using openSSL with Client Authentication

2004-03-11 Thread saravanan.babu
Hi All, I wanted to support SSL with Client Authentication over Tomcat 4.18. I followed the steps mentioned in the link below, but I couldn't succeed in getting the client authentication to work,however I was able to get the https working with clientAuth=false in tomcat's configuration file

Using Tomcat to implement a Weblogic like SSO authentication

2004-03-10 Thread Jose Alberto Fernandez
diferent names for the sessionID parameter. All webapps sharing the same sessionID name will share the same user authentication information. This is independent of whether the sessionID is passed as a coockie or as a parameter of the request. So given the following URLs: /app1/main.html;dom1Id

Tomcat Realm Authentication + Storing Objects In The Session

2004-03-10 Thread Alan Weissman
Hey Everyone - I have been trying to figure out if Realm authentication is appropriate for my project or if I need to implement my own. My biggest unknown right now is, because the server handles the creation of the session, what would it take to make the server grab a user object from

RE: Tomcat Realm Authentication + Storing Objects In The Session

2004-03-10 Thread Shapira, Yoav
Hi, I've run into this in JBoss and ended up making some custom mechanisms - I'm hoping I don't have to do the same here! You would have to write custom code. Yoav Shapira This e-mail, including any attachments, is a confidential business communication, and may contain information that is

Re: AD authentication if exact jndi context not known

2004-03-10 Thread Martin Rostan
but I don't see it on the mailing list. 2004-03-03 09:01:31 JNDIRealm[Standalone]: Exception performing authentication javax.naming.PartialResultException. Root exception is javax.naming.CommunicationException: neptuno:389. Root exception is java.net.ConnectException: Connection timed out

RE: Tomcat Realm Authentication + Storing Objects In The Session

2004-03-10 Thread Ronald Wildenberg
My biggest unknown right now is, because the server handles the creation of the session, what would it take to make the server grab a user object from the database and store it in the session after the user logs in? Can't you use an HttpSessionListener for this? It is called right

Client authentication and customized error pages

2004-03-04 Thread Carlos Guardiola
Hi everyone! I'm using SSL client authentication in a tomcat 5.0.19. Everything goes fine, but i need some help customizing error pages. When a client want to use my application, the browser asks him to choose a valid certificate, but perhaps he hasn't a valid one. If he doesn't have

Re: Client authentication and customized error pages

2004-03-04 Thread Bill Barker
the case where there is no cert sent. Carlos Guardiola [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi everyone! I'm using SSL client authentication in a tomcat 5.0.19. Everything goes fine, but i need some help customizing error pages. When a client want to use my application

Form based authentication

2004-03-02 Thread Edd Dawson
Hi I have successfully set up tomcat to protect various parts of my application using JDBCrealm and form-based-authentication, and it all works fine. Now i have written a system whereby new users can register and it creates them their chosen username and puts them in the right roles

Form-based authentication question

2004-03-01 Thread Edd Dawson
Hi I have successfully set up tomcat to protect various parts of my application using JDBCrealm and form-based-authentication, and it all works fine. Now i have written a system whereby new users can register and it creates them their chosen username and puts them in the right roles

Re: Alternatives to J2EE Authentication

2004-02-27 Thread Carlos Cajina - Hotmail
] To: [EMAIL PROTECTED] Sent: Thursday, February 26, 2004 10:31 PM Subject: Re: Alternatives to J2EE Authentication Having just researched this, here's what i found. Using a javax.servlet.Filter works very well. As you say, You check the session for an attribute value that indicates authentication

Alternatives to J2EE Authentication

2004-02-26 Thread Steven J. Owens
Hi folks, The most common (and frustrating) bookmarked login page gotcha with J2EE authentication has been oft-discussed (broken as designed) on this list. What are people's favorite alternatives to J2EE authentication? And why? Something I'm particularly interested

Re: Alternatives to J2EE Authentication

2004-02-26 Thread Nathan Maves
http://securityfilter.sourceforge.net/ This is perfect! Not container specific! On Feb 26, 2004, at 4:19 PM, Steven J. Owens wrote: Hi folks, The most common (and frustrating) bookmarked login page gotcha with J2EE authentication has been oft-discussed (broken as designed) on this list

Re: Alternatives to J2EE Authentication

2004-02-26 Thread David Evans
Having just researched this, here's what i found. Using a javax.servlet.Filter works very well. As you say, You check the session for an attribute value that indicates authentication. in its absence you use a RequestDispatcher to forward to a login servlet which checks for four cases: 1

Possible to implement Pubcookie authentication using Tomcat Realm?

2004-02-24 Thread Jonathan Eric Miller
I recently found out about a way to create a single sign-on setup for authentication for Web applications called Pubcookie. The following link has a diagram that shows how it works. If a user hasn't yet authenticated, they are redirected to a separate server that displays a login page. Then, once

Reg Form Authentication

2004-02-18 Thread shanmugampl
Hi All, I am using FORM authentication for my web pages. I have no problems in authenticating a user during login where the flow would be like Secured page Login Screen Authentication via form --- Secured Page on success. Now i have another page where a user can sign

NTLM Authentication POST Method

2004-02-17 Thread Kumar Abhay-CAK203C
Hello, I am using post method of sending data to servlet from a JSP page. I am unable to get the data by request.getParameter(). If I am using get method I am able to retrieve data from JSP page I was just searching on Google. Actually I am using NTLM Authentication in my Login Servlet. I

Form Based Authentication - Registration

2004-02-14 Thread Alexander F. Hartner
We have form based authentication working as follows : 1.) Customer requests access to a realm 2.) Redirect to login page 3.) Customer authenticates 4.) Customer redirected to realm as original request No we want to add registration and have the following happen 1.) Customer requests access

Re: Form Based Authentication - Registration

2004-02-14 Thread Adam Hardy
registration the customer is redirected to the original request Now to get this working we need the following, both of which we are not sure are currently provided by the authentication framework. -Ability to access the original (SavedRequest) from a JSP / Servlet -Ability to auto/fake login from

RE: NTLM Authentication POST Method

2004-02-13 Thread Kumar Abhay-CAK203C
Authentication POST Method From the servlet API: If the parameter data was sent in the request body, such as occurs with an HTTP POST request, then reading the body directly via getInputStream() or getReader() can interfere with the execution of this method. Just wondering if any of the method mentioned

NTLM Authentication POST Method

2004-02-12 Thread Kumar Abhay-CAK203C
Hello, I am using post method of sending data to servlet from a JSP page. I am unable to get the data by request.getParameter(). If I am using get method I am able to retrieve data from JSP page I was just searching on Google. Actually I am using NTLM Authentication in my Login Servlet. I

RE: NTLM Authentication POST Method

2004-02-12 Thread Yansheng Lin
in your doPost()? Hope this helps. -Original Message- From: Kumar Abhay-CAK203C [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 11, 2004 12:08 PM To: 'Tomcat Users List' Subject: NTLM Authentication POST Method Importance: High Hello, I am using post method of sending data

NTLM Authentication POST Method

2004-02-11 Thread Kumar Abhay-CAK203C
Hello, I am using post method of sending data to servlet from a JSP page. I am unable to get the data by request.getParameter(). If I am using get method I am able to retrieve data from JSP page I was just searching on Google. Actually I am using NTLM Authentication in my Login

Form Based Authentication - Registration

2004-02-10 Thread Alexander F. Hartner
We have form based authentication working as follows : 1.) Customer requests access to a realm 2.) Redirect to login page 3.) Customer authenticates 4.) Customer redirected to realm as original request No we want to add registration and have the following happen 1.) Customer requests access

Tomcat Manager/Admin authentication

2004-02-10 Thread Pete Stokes
Does any1 know how to turn off the Tomcat prompting for u/p when trying to access manager / admin applications ? Thanks, Pete. *** This email and any files transmitted with it are confidential and intended solely

RE: Tomcat Manager/Admin authentication

2004-02-10 Thread Shapira, Yoav
Howdy, Does any1 know how to turn off the Tomcat prompting for u/p when trying to access manager / admin applications ? It's not possible without modifying the source code for those apps. Yoav Shapira This e-mail, including any attachments, is a confidential business communication, and may

RE: Tomcat Manager/Admin authentication

2004-02-10 Thread Juan de Bravo
/Admin authentication Howdy, Does any1 know how to turn off the Tomcat prompting for u/p when trying to access manager / admin applications ? It's not possible without modifying the source code for those apps. Yoav Shapira This e-mail, including any attachments, is a confidential business

RE: Tomcat Manager/Admin authentication

2004-02-10 Thread Bill Haake
Yes, this works. I just tested it with each on the current 5.0 from CVS -Original Message- From: Juan de Bravo [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 10, 2004 12:11 PM To: 'Tomcat Users List' Subject: RE: Tomcat Manager/Admin authentication I think you can turn it off

RE: Tomcat Manager/Admin authentication

2004-02-10 Thread Shapira, Yoav
Howdy, I think you can turn it off by deleting the security-constraint definitions in the file /WEB-INF/web.xml of both apps. Doh! ;) puts foot in mouth Well, at least I provided some humor today. Thanks Juan ;) Yoav Shapira This e-mail, including any attachments, is a confidential

How to restrict all webapps with http authentication in Tomcat?

2004-02-06 Thread Salvador Santander Gutierrez
I need to restrict all web applications in Tomcat with the same users? I know how to restrict a specific web application with its web.xml but... how to restrict /* in tomcat, included html pages? Thanks. - To unsubscribe,

RE: How to restrict all webapps with http authentication in Tomcat?

2004-02-06 Thread rlipi
to restrict all webapps with http authentication in Tomcat? I need to restrict all web applications in Tomcat with the same users? I know how to restrict a specific web application with its web.xml but... how to restrict /* in tomcat, included html pages? Thanks

Re: How to restrict all webapps with http authentication in Tomcat?

2004-02-06 Thread Salvador Santander Gutierrez
Thanks for your help but the url passed doesn´t work. - Original Message - From: rlipi [EMAIL PROTECTED] To: 'Tomcat Users List' [EMAIL PROTECTED] Sent: Friday, February 06, 2004 10:21 AM Subject: RE: How to restrict all webapps with http authentication in Tomcat? Will help

RE: How to restrict all webapps with http authentication in Tomcat?

2004-02-06 Thread rlipi
Gutierrez [mailto:[EMAIL PROTECTED] Sent: Friday, February 06, 2004 12:07 PM To: Tomcat Users List Subject: Re: How to restrict all webapps with http authentication in Tomcat? Thanks for your help but the url passed doesn´t work. - Original Message - From: rlipi [EMAIL PROTECTED

Help with Active directory authentication in tomcat 5

2004-02-04 Thread Paul Gier
I am trying to authenticate web users against an active directory instance, but for some reason the configuration that worked in tomcat 4.1 is not working in tomcat 5.0.18 Here is the message that I get from the realm authentication with debugging turned on: 2004-02-04 16:10:20 JNDIRealm[/lts

RE: Customized authentication - overriding getUserPrincipal()

2004-02-04 Thread Morten S. Mortensen
All my custom authentication schemes are now operational! On both 4.1.29 and 5.0.18. I have had a real tough time, though. Apparently, the subject is complex, since no one here had any comment. - Together with custom authentication, I can also do HTTP content compression, override

Customized authentication - overriding getUserPrincipal()

2004-02-03 Thread Morten S. Mortensen
Hi all, I am in the process of testing some custom authentication schemes of my own. One thing, I would like, is to have request.getUserPrincipal() and request.getAuthType() return what I tell the request to return. The usual way to grab and manipulate things is to write a filter (or servlet

Re: Client Authentication

2004-01-29 Thread Adam Hardy
is set up security-constraints in your web.xml for the appropriate pages. That is documented well in the servlet spec. Adam On 01/28/2004 11:24 PM Milazzo, Michael A HQISEC wrote: Hi, I am trying to configure Tomcat to protect my pages using SSL client authentication. I changed the clientAuth

Client Authentication

2004-01-28 Thread Milazzo, Michael A HQISEC
Hi, I am trying to configure Tomcat to protect my pages using SSL client authentication. I changed the clientAuth option within the HTTPS connector, but I'm not sure what to do next. My code already tries to look for the certs and parse them, but I am not sure what else I need to configure

Problem using Tomcat Authentication

2004-01-27 Thread amit varshney
I am using the Jdbcrealm to authenticate the users.I want to use admin tool to create the users. But when I create the uses admin tool the user name and password r not being stored in the database rather they r being stored in /conf/Tomcat-users.xml. What should I do so that the user created

[URGENT] Problems getting SSL 2-Way Authentication to work

2004-01-26 Thread Tamas Suto
To whomever can help: I'm trying to get a 2-way authentication mechanism working for Tomcat 4.1.29. I have browsed many archives and guides and have come up with some steps of commands to try and get the whole business up and running (see further down). I basically have a server and a client

RE: [URGENT] Problems getting SSL 2-Way Authentication to work

2004-01-26 Thread Mark Thomas
I am not familiar with openssl but having reviewed your steps you might want to try the following: - Import your CA cert into the trusted CAs for your browser. - You shouldn't need your CA cert in your keystore file, providing that the CA cert is installed in cacerts. Try removing it from the

Problem using Tomcat User Authentication

2004-01-24 Thread amit varshney
I am working in JSP/Servlets on Windows XP. I want to use the Tomcat user Authentication in my web application. So using tomcat's JDBC Realm I have stored the username and passwords in the Oracle 9I Database. I want to use authentcation for accessing the different modules. so I have created

SV: Problem using Tomcat User Authentication

2004-01-24 Thread Søren Blidorf
I guess you should look at session.invalidate();. BR Soren -Oprindelig meddelelse- Fra: amit varshney [mailto:[EMAIL PROTECTED] Sendt: 24. januar 2004 12:47 Til: [EMAIL PROTECTED] Emne: Problem using Tomcat User Authentication I am working in JSP/Servlets on Windows XP. I want

Re: Changing FORM Authentication page

2004-01-22 Thread Adam Hardy
If you get the referrer - but often you don't, depending on the browser. Ricardo, is your form authentication page a JSP? If so, it can deal with any parameters you pass it. What exactly are you thinking of? Adam On 01/21/2004 02:28 PM Matt Raible wrote: You could check the referer and change

Changing FORM Authentication page

2004-01-21 Thread Ricardo García
Is there some way to personalise the form authentication page of a context by passing a parameter? I want to change an image of the login page depending on the origin (static) page of the user. Is this possible? Thanks, Ricardo.

RE: Changing FORM Authentication page

2004-01-21 Thread Matt Raible
You could check the referer and change accordingly. -Original Message- From: Ricardo García [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 21, 2004 5:15 AM To: Tomcat-user-list (E-mail) Subject: Changing FORM Authentication page Is there some way to personalise the form

FORM based authentication referer

2004-01-21 Thread Ricardo García
Here's some starting context for my question I have a war file that has been configured to use FORM based authentication. I have set the form-login-page in the web.xml of the war file to point to a jsp file in my war file. When a user invokes any jsp without being logged in the login jsp

RE: FORM based authentication referer

2004-01-21 Thread Guy Rouillier
Ricardo García wrote: Here's some starting context for my question I have a war file that has been configured to use FORM based authentication. I have set the form-login-page in the web.xml of the war file to point to a jsp file in my war file. When a user invokes any jsp without

SSL Client authentication

2004-01-17 Thread tkassem
Hi All, Using jboss-3.2.3-tomact 4.1.29, i've got both server and client authentication fully working. Using the same keystore and with clientAuth set to false, everything works fine, but when i set clientAuth to 'true', the server fails to authenticate my client. My connector in .../jbossweb

Re: SSL Client authentication

2004-01-17 Thread Bill Barker
and client authentication fully working. Using the same keystore and with clientAuth set to false, everything works fine, but when i set clientAuth to 'true', the server fails to authenticate my client. My connector in .../jbossweb-tomcat.sar/META-INF/jboss-service.xml is... Connector className

TOMCAT authentication

2004-01-16 Thread postmaster
even ask for use to enter his/her username and password while if user goes through first page of IIS (where it redirects to tomcat) IIS askes user for his/her username and password. How do I enable authentication at Tomcat so that even if users knows direct URL it would still ask him/her

TOMCAT authentication

2004-01-15 Thread John Smith
ask for use to enter his/her username and password while if user goes through first page of IIS (where it redirects to tomcat) IIS askes user for his/her username and password. How do I enable authentication at Tomcat so that even if users knows direct URL it would still ask him/her for his/her

SV: TOMCAT authentication

2004-01-15 Thread Jonas Karlsson
then Tomcat wont even ask for use to enter his/her username and password while if user goes through first page of IIS (where it redirects to tomcat) IIS askes user for his/her username and password. How do I enable authentication at Tomcat so that even if users knows direct URL it would still ask him/her

Re: TOMCAT authentication

2004-01-15 Thread Howard Watson
It sounds like you may need to configure IIS require authentication from the user no matter how they get there by requireing authentication to the directory(s) with the dynamic content. But, don't know enough about IIS to tell you how to do that. [EMAIL PROTECTED] 01/15/04 02:54PM Hello I'm

tomcat client authentication bug.

2004-01-14 Thread Amjad Shahrour
This is in bugzilla. How can I resolve this problem??? Please help. Here is an excerpt of the JSSE logs. We not only tried to authenticate via a browser but also via a Java client, so we possess client logs as well. It seems as if, at some point during the handshake procedure, the

Vedr.: IIS + Tomcat 5.0 + NT authentication AUTH_USER

2004-01-09 Thread Thomas Nybro Bolding
Simply put request.tomcatAuthentication=false somewhere in your jk2.properties file. /Thomas Jason Wilson [EMAIL PROTECTED] 08-01-04 18:54 Besvar venligst til Tomcat Users List Til:[EMAIL PROTECTED] cc: Vedr.: IIS + Tomcat 5.0 + NT authentication AUTH_USER

Re: IIS + Tomcat 5.0 + NT authentication AUTH_USER

2004-01-09 Thread Daniel Schmitt
on the apache site, perhaps? Thanks, Jason --- Daniel Schmitt [EMAIL PROTECTED] wrote: There is an registry entry [HKEY_LOCAL_MACHINE\SOFTWARE\Apache Software Foundation\Jakarta Isapi Redirector\2.0] authComplete=0 which toggles authentication handled by tomcat or iis. just an idea -- Daniel

RE: Forms Authentication

2004-01-08 Thread Chris Ward
snip I want to have a login link and a logout link.snip snip how do you tell j_security_check where to go once the user has logged in successfully. snip If your application requires the click here to login functionality, where would the user expect to go after logging in? If it's to a

IIS + Tomcat 5.0 + NT authentication AUTH_USER

2004-01-08 Thread Jason Wilson
to implicitly logon, I am using NT authentication with IIS.  In other words, for the virtual directory, I have set the Anonomous access off, and Integrated Windows Authenticated on. In the IIS + ColdFusion setup, my servlet does a request.getHeader(AUTH_USER); and this returns the domain/userid

Re: IIS + Tomcat 5.0 + NT authentication AUTH_USER

2004-01-08 Thread Daniel Schmitt
There is an registry entry [HKEY_LOCAL_MACHINE\SOFTWARE\Apache Software Foundation\Jakarta Isapi Redirector\2.0] authComplete=0 which toggles authentication handled by tomcat or iis. just an idea -- Daniel Schmitt http://www.shiftomat.com

Re: IIS + Tomcat 5.0 + NT authentication AUTH_USER

2004-01-08 Thread Jason Wilson
\Apache Software Foundation\Jakarta Isapi Redirector\2.0] authComplete=0 which toggles authentication handled by tomcat or iis. just an idea -- Daniel Schmitt http://www.shiftomat.com - To unsubscribe, e

RE: IIS + Tomcat 5.0 + NT authentication AUTH_USER

2004-01-08 Thread Hooper, Brian
PROTECTED] Sent: Thursday, January 08, 2004 12:54 PM To: [EMAIL PROTECTED] Subject: IIS + Tomcat 5.0 + NT authentication AUTH_USER Hi,   I'm using Tomcat 5.0.16 connector-jk-2.0.2-win32-iis IIS 5.0 Currently my application is running under IIS + ColdFusion(Jrun), but will be migrating

Forms Authentication

2004-01-07 Thread Gregg Bolinger
I am working with Tomcat 5 and Forms authentication. I am just using the tomcat-users.xml for now until I get everything working. What I am wondering is if I go directly to my login.jsp page instead of letting Tomcat determine if I need to go there based on the page I am accessing, how do you

Re: Forms Authentication

2004-01-07 Thread QM
: So is there a way to overcome this? BTW ? if I reference the login.jsp from : a secure page, everything works fine. So I know I have things setup : correctly thus far. If I may ask, why would you want to hit the login page directly? Is this for a click here to login link? -QM -- software

Re: Forms Authentication

2004-01-07 Thread Tang Wern Chait
[EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Thursday, January 08, 2004 8:01 AM Subject: Re: Forms Authentication : So is there a way to overcome this? BTW ? if I reference the login.jsp from : a secure page, everything works fine. So I know I have things setup : correctly

RE: Forms Authentication

2004-01-07 Thread Gregg Bolinger
List Subject: Re: Forms Authentication : So is there a way to overcome this? BTW ? if I reference the login.jsp from : a secure page, everything works fine. So I know I have things setup : correctly thus far. If I may ask, why would you want to hit the login page directly? Is this for a click here

problem with forms authentication

2004-01-04 Thread Clark D. Richey, Jr.
I am running Tomcat 5.0.16 and using Form based authentication with the JDBC realm. I have ported an application that was previously running on Tomcat 4.x to 5.0.16. Now, after being authenticated on the login page I keep receiving this error: Invalid direct reference to form login page I am

Re: problem with forms authentication

2004-01-04 Thread QM
: Invalid direct reference to form login page Just one, but it has nothing to do with the upgrade: are cookies enabled in your browser? -QM -- software -- http://www.brandxdev.net (C++ / Java / SSL) tech news -- http://www.RoarNetworX.com

RE: problem with forms authentication

2004-01-04 Thread Clark D. Richey, Jr.
: Monday, January 05, 2004 12:22 AM To: Tomcat Users List Subject: Re: problem with forms authentication : Invalid direct reference to form login page Just one, but it has nothing to do with the upgrade: are cookies enabled in your browser? -QM -- software -- http://www.brandxdev.net (C

Two authentication mechanisms in a webapp.

2003-12-30 Thread Ilari Kontinen
Hello, I have a web-application that has a JSP-based UI and an AXIS-based web service. I need to use FORM-based authentication for the UI users and BASIC-authentication for web service users. Is it possible to have the two authentication mechanisms in one webapp, or do I need to separate the UI

Re: Two authentication mechanisms in a webapp.

2003-12-30 Thread Bill Barker
Ilari Kontinen [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hello, I have a web-application that has a JSP-based UI and an AXIS-based web service. I need to use FORM-based authentication for the UI users and BASIC-authentication for web service users. Is it possible to have

Re: 2 way SSL ( client authentication)

2003-12-29 Thread Bill Barker
in your TrustStore. Amjad Shahrour [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi all, I am trying to implement 2 way SSL ( client authentication) on tomcat 4. I am following all steps. But still have something missing. ( all documentations descrips how to deal

2 way SSL ( client authentication)

2003-12-28 Thread Amjad Shahrour
Hi all, I am trying to implement 2 way SSL ( client authentication) on tomcat 4. I am following all steps. But still have something missing. ( all documentations descrips how to deal with certificates that are varified by CA). I need to know how to generate a normal self-signed

Form Authentication/JAAS ??

2003-12-15 Thread Renato Romano
I would like some clarifications about handling authentication in a webapp: it seems to me the simplest way to authenticate users is using form base auth, in conjunction with declarative security (declaring resources/roles in web.xml); the main problem with this approach in my opinion is handling

Authentication Pattern

2003-12-15 Thread Renato Romano
I would like some clarifications about handling authentication in a webapp: it seems to me the simplest way to authenticate users is using form base auth, in conjunction with declarative security (declaring resources/roles in web.xml); the main problem with this approach in my opinion is handling

Re: Authentication Pattern

2003-12-15 Thread Adam Hardy
, for example; moreover, in order to allow authentication to be performed on the home page, you need to force the client to make a request to a protected page (correct??!!), which seems not so clean!! Whether it's not clean is a point of view: from another point of view, why should someone login on your

bug in apache 2 authentication + tomcat 4.1.29 + mod_jk 1.2.5 ?

2003-12-09 Thread Stefanos Karasavvidis
I have an issue with apache authentication and tomcat, but I'm not sure if this is a bug or just the way it works. I have Apache 2.0.47 (windows + linux) tomcat 4.1.29 mod_jk 1.2.5 The connector element has tomcatAuthentication=false (I tried also putting this in jk2.properties

Basic Authentication

2003-12-05 Thread Bui, Bao-Ha D
Hi all, I need to capture the WinNT account name of users to a jsp page. We have Active Directory at our company. We can have a basic login form (that standard pop up login form from Window). Could anyone tell me where to start and how to set it up? I have looked at the HowTo for Tomcat

RE: Basic Authentication

2003-12-05 Thread Edson Alves Pereira
List' Assunto: Basic Authentication Hi all, I need to capture the WinNT account name of users to a jsp page. We have Active Directory at our company. We can have a basic login form (that standard pop up login form from Window). Could anyone tell me where to start and how to set

Re: Basic Authentication

2003-12-05 Thread Matt Raible
You might want to read the comments on the following URL - it shows how to configure authentication with a Windows domain, but apparently, it's out of date: http://www.raibledesigns.com/page/rd? anchor=easy_windows_authentication_with_tomcat Matt On Dec 5, 2003, at 9:45 AM, Bui, Bao-Ha D

Re: Basic Authentication

2003-12-05 Thread Tim Funk
http://jakarta.apache.org/tomcat/faq/windows.html#ntlm -Tim Bui, Bao-Ha D wrote: Hi all, I need to capture the WinNT account name of users to a jsp page. We have Active Directory at our company. We can have a basic login form (that standard pop up login form from Window). Could anyone

RE: Basic Authentication

2003-12-05 Thread Sleeper, Jesse
(CHALLENGE_MESSAGE)); res.flushBuffer(); return; } // Step 3: Authentication message received if (msg[8] == 3) { int off = 30; int length, offset; length = (msg[off+1]8) + msg[off]; offset = (msg[off+3]8) + msg[off+2]; String domain

Apache, Tomcat and authentication appear to be working correctly%String uName = request.getRemoteUs

2003-12-04 Thread Howard Watson
Apache, Tomcat and authentication appear to be working correctly%String uName = request.getRemoteUser();% //returns nullNetware 6 sp3Apache 2.0.48Tomcat 4.1.29mod_jk 1.2.5more info: http://developer-forums.novell.com/group/novell.devsup.webserver.apache2/readerNoFrame.tpt/@[EMAIL PROTECTED

Re: Difficulty with SSL authentication without client certificate

2003-11-29 Thread Bill Barker
certificates as optional But there must be a Tomcat alone solution. -Mensaje original- De: Lira, Alesio Enviado el: jueves 27 de noviembre de 2003 11:17 Para: Tomcat Users List Asunto: RE: Difficulty with SSL authentication without client certificate The most usual case

Re: Authentication with JAAS / Form Autenthication/ j_security_check

2003-11-28 Thread Andoni
] To: Tomcat Users List [EMAIL PROTECTED] Sent: Thursday, November 27, 2003 10:08 PM Subject: Re: Authentication with JAAS / Form Autenthication/ j_security_check On 11/27/2003 06:41 PM Jose Antonio Chirinos wrote: Hi, i have a web application that use web authentication through

Re: Authentication with JAAS / Form Autenthication/ j_security_check

2003-11-28 Thread Adam Hardy
to hack a solution to me!! Sorry if your not! Andoni. - Original Message - From: Adam Hardy [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Thursday, November 27, 2003 10:08 PM Subject: Re: Authentication with JAAS / Form Autenthication/ j_security_check On 11/27/2003 06

Re: Authentication with JAAS / Form Autenthication/ j_security_check

2003-11-28 Thread Jose Antonio Chirinos
Thanks for yours sugestions, the reason for which i need to do that is because i have to do an authentication module that are able to authenticate a user depending on a company. That is because a user can be in 2 or more companys and the data of the companys is diferent. Thanks in Advanced

Form based authentication

2003-11-28 Thread Atreya Basu
Hi all, I thought I would share some of my experiences with JDBCRealm authentication. First what I wanted to do was see if JDBCRealm based authentication even worked. All I got was Tomcat quitting. My first problem was that my web.xml file wasn't in the right order. I went to BEA's website

RE: Form based authentication

2003-11-28 Thread Patrick Willart
Hello Atreya, Your stylesheet is returned after authentication because it is access restricted. If you make your stylesheet freely accessible it will work. grts, Patrick -Original Message- From: Atreya Basu [mailto:[EMAIL PROTECTED] Sent: Friday, November 28, 2003 8:01 AM To: Tomcat

RE: Authentication with JAAS / Form Autenthication/ j_security_check

2003-11-28 Thread rfhall
Jose, How about sending the user to an intermediate page after logging in to select a company? Robert = Original Message From Jose Antonio Chirinos [EMAIL PROTECTED] = Thanks for yours sugestions, the reason for which i need to do that is because i have to do an authentication module

Re: Difficulty with SSL authentication without client certificate

2003-11-27 Thread Bill Barker
is present it will be used, but if it doesn't exist the application will resolve the situation with the user authentication level already known. After wrestling with the web.xml parameters and defining a user realm; I have found that Tomcat ( 4.1.27 ) returns a BAD REQUEST; and control is never ever given

<    1   2   3   4   5   6   7   8   9   10   >