RE: form-based auth

2003-02-03 Thread Madere, Colin
ay, February 01, 2003 3:10 AM > To: [EMAIL PROTECTED] > Subject: Re: form-based auth > > > "Craig R. McClanahan" <[EMAIL PROTECTED]> wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > > > "Craig R. McClanahan"

Re: form-based auth

2003-02-01 Thread Bill Barker
> Reply-To: Tomcat Users List <[EMAIL PROTECTED]> > > To: [EMAIL PROTECTED] > > Subject: Re: form-based auth > > > > > > "Craig R. McClanahan" <[EMAIL PROTECTED]> wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]..

Re: form-based auth

2003-01-31 Thread Craig R. McClanahan
On Fri, 31 Jan 2003, Bill Barker wrote: > Date: Fri, 31 Jan 2003 22:54:38 -0800 > From: Bill Barker <[EMAIL PROTECTED]> > Reply-To: Tomcat Users List <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Subject: Re: form-based auth > > > "Craig R. McClana

Re: form-based auth

2003-01-31 Thread Bill Barker
"Craig R. McClanahan" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > On Fri, 31 Jan 2003, Madere, Colin wrote: > > > Date: Fri, 31 Jan 2003 14:06:27 -0600 > > From: "Madere, Colin" <[EMAIL PROTECTED]> > > Reply-To: Tomcat Users List <[EMAIL PROTECTED]> > >

Re: form-based auth

2003-01-31 Thread Craig R. McClanahan
On Fri, 31 Jan 2003, Madere, Colin wrote: > Date: Fri, 31 Jan 2003 14:06:27 -0600 > From: "Madere, Colin" <[EMAIL PROTECTED]> > Reply-To: Tomcat Users List <[EMAIL PROTECTED]> > To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> > Subject: form-based auth > > Anyone out there have multiple contexts (

Re: form-based auth in Tomcat 3.2.1

2001-03-21 Thread Valeriy Molyakov
I add mapping on httpd.conf : JkMount /auto/login/j_security_check ajp13 ... All works ! - Original Message - From: Valeriy Molyakov To: [EMAIL PROTECTED] Sent: Wednesday, March 21, 2001 2:54 PM Subject: Help

Re: form-based auth in Tomcat 3.2.1

2001-03-21 Thread affan
Dear Ian,I have complet the configuration and all the stuff but i want to change thecolor combinition and other lay-out of the world pay page how i can dothis..?Please let me know.AffanFreezone Internet Ltd. - Original Message - From: Valeriy Molyakov To: [EMAIL PROTECT

Re: Form based auth. again...

2001-03-21 Thread Christian Rauh
Vladimir Grishchenko wrote: > > Christian Rauh wrote: > > > > Vladimir Grishchenko wrote: > > > > > > Christian Rauh wrote: > > > > > > > > Vladimir Grishchenko wrote: > > > > > > > > > I am also facing the same problem and had an idea while reading your > > > > post. Maybe you can set a frame on

Re: Form based auth. again...

2001-03-14 Thread Vladimir Grishchenko
Christian Rauh wrote: > > Vladimir Grishchenko wrote: > > > > Christian Rauh wrote: > > > > > > Vladimir Grishchenko wrote: > > > > > > > I am also facing the same problem and had an idea while reading your > > > post. Maybe you can set a frame on your main page where you want the > > > login to

Re: Form based auth. again...

2001-03-14 Thread Christian Rauh
Vladimir Grishchenko wrote: > > Christian Rauh wrote: > > > > Vladimir Grishchenko wrote: > > > > > I am also facing the same problem and had an idea while reading your > > post. Maybe you can set a frame on your main page where you want the > > login to appear. That frame links to that welcome p

Re: Form based auth. again...

2001-03-14 Thread Vladimir Grishchenko
Daniel Lopez wrote: > > Hi Vladimir, > > > > > I'm thinking along the same lines... You could also embed a tiny invisible > > image in protected area to your front page (named /welcome, for example) > > and define your login form as /welcome?mode=login, so whenever you're not > > authorized we

Re: Form based auth. again...

2001-03-14 Thread Daniel Lopez
Hi Vladimir, > I'm thinking along the same lines... You could also embed a tiny invisible > image in protected area to your front page (named /welcome, for example) > and define your login form as /welcome?mode=login, so whenever you're not > authorized welcome page is smart to display you a lo

Re: Form based auth. again...

2001-03-14 Thread Vladimir Grishchenko
Christian Rauh wrote: > > Vladimir Grishchenko wrote: > > > > "Craig R. McClanahan" wrote: > > > > > > * Have the link on your home page exactly has you describe, but have > > > the link point at a "Welcome To My Application" page inside the > > > protected area. The fact that this page is p

Re: Form based auth. again...

2001-03-14 Thread Christian Rauh
Vladimir Grishchenko wrote: > > "Craig R. McClanahan" wrote: > > > > * Have the link on your home page exactly has you describe, but have > > the link point at a "Welcome To My Application" page inside the > > protected area. The fact that this page is protected will trigger > > the authe

Re: Form based auth. again...

2001-03-12 Thread Vladimir Grishchenko
"Craig R. McClanahan" wrote: > > On Sun, 11 Mar 2001, Vladimir Grishchenko wrote: > > > Hi, > > > > Just wondering if it's possible to get built-in form based authentication to > > work without the user actually trying to access a protected resource? I want to > > have a login box on the first p

Re: Form based auth. again...

2001-03-12 Thread Craig R. McClanahan
On Sun, 11 Mar 2001, Vladimir Grishchenko wrote: > Hi, > > Just wondering if it's possible to get built-in form based authentication to > work without the user actually trying to access a protected resource? I want to > have a login box on the first page that users can use to authenticate > t

RE: Form-Based Auth and tracking Login Attempts

2001-03-07 Thread Alistair Hopkins
Why not implement a unix-style login which gets slower after every duff attempt? -Original Message- From: Randy Layman [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 07, 2001 1:10 PM To: [EMAIL PROTECTED] Subject: RE: Form-Based Auth and tracking Login Attempts One

RE: Form-Based Auth and tracking Login Attempts

2001-03-07 Thread Randy Layman
One suggestion might be to modify JDBCRealm so that on unsuccessful login it updates a database field (like NUM_BAD_LOGINS) to one more than it is. Then when the magic number is triggered, you don't allow them to login even with the correct password. When the administrator resets the pa

Re: Form based auth

2001-03-05 Thread Craig R. McClanahan
Mike Slinn wrote: > Message-ID: <[EMAIL PROTECTED]> > > I read in org.apache.tomcat.request.JDBCRealm.java that the proper URI > should be "/j_security_check", and that if the preceeding "/" is not > present, or if another path is prepended, the path is normalized to > "/j_security_check". > If

Re: Form based auth

2001-03-02 Thread Mike Slinn
Message-ID: <[EMAIL PROTECTED]> I read in org.apache.tomcat.request.JDBCRealm.java that the proper URI should be "/j_security_check", and that if the preceeding "/" is not present, or if another path is prepended, the path is normalized to "/j_security_check". If this URI is recognized, and the

Re: Form based auth

2001-03-02 Thread Craig R. McClanahan
"McCay, Larry" wrote: > vVolf, > > I have observed the same behavior on 3.1 and 3.2.1. > > I am going to dig in a little deeper to see what security functionality is > supported at all. > Form based security was not supported in Tomcat 3.1, but is supported in 3.2 and 4.0. Note that you do ***n

RE: Form based auth

2001-02-28 Thread McCay, Larry
vVolf, I have observed the same behavior on 3.1 and 3.2.1. I am going to dig in a little deeper to see what security functionality is supported at all. thanks, -larry -Original Message- From: uthay To: [EMAIL PROTECTED] Sent: 2/27/01 11:47 AM Subject: Re: Form based auth > hmm

Re: Form based auth

2001-02-27 Thread uthay
> hm, according to servlet specification v2.2: If you are using servlet then you dont need the extension. But if your context is say webapps/xxx/ and you have j_security_check.class inside xxx/WEB-INF then you may want to try xxx/j_security_check Uthay - Original Message - From: "

Re: Form based auth

2001-02-27 Thread uthay
Is your file "j_security_check" a jsp file or servlet If jsp where is the extension! If servlet you may want to make sure you are giving the correct context path. - Original Message - From: "Herchel Wojciech" <[EMAIL PROTECTED]> To: "'Tomcat'" <[EMAIL PROTECTED]> Sent: Tuesday, Febr