Re: Struts 2 Container Security problem

2009-03-17 Thread Musachy Barroso
with WAS 6.1. Then I have a stronger case to press issue for WAS 7.0. --- On Mon, 3/16/09, pblatner pblat...@gmail.com wrote: From: pblatner pblat...@gmail.com Subject: Re: Struts 2 Container Security problem To: user@struts.apache.org Received: Monday, March 16, 2009, 9:05 PM I have tried

Re: Struts 2 Container Security problem

2009-03-17 Thread pblatner
. If this is determined to be a Websphere problem with WAS 6.1. Then I have a stronger case to press issue for WAS 7.0. --- On Mon, 3/16/09, pblatner pblat...@gmail.com wrote: From: pblatner pblat...@gmail.com Subject: Re: Struts 2 Container Security problem To: user@struts.apache.org Received: Monday

Re: Struts 2 Container Security problem

2009-03-17 Thread pblatner
a stronger case to press issue for WAS 7.0. --- On Mon, 3/16/09, pblatner pblat...@gmail.com wrote: From: pblatner pblat...@gmail.com Subject: Re: Struts 2 Container Security problem To: user@struts.apache.org Received: Monday, March 16, 2009, 9:05 PM I have tried to do the exact thing

Re: Struts 2 Container Security problem

2009-03-17 Thread Struts Two
pblat...@gmail.com Subject: Re: Struts 2 Container Security problem To: user@struts.apache.org Received: Tuesday, March 17, 2009, 9:20 PM I installed the latest fix pack for WebSphere, bringing my version up to 6.1.0.21 and it did the trick.  The Web container authentication now works as I

Re: Struts 2 Container Security problem

2009-03-16 Thread pblatner
in the root of the application's context path. I usually split my struts2 application into at least two packages: package name=public namespace=/ ... package name=secure namespace=/protected -- View this message in context: http://www.nabble.com/Struts-2-Container-Security-problem

Re: Struts 2 Container Security problem

2009-03-16 Thread Struts Two
=/ ... package name=secure namespace=/protected -- View this message in context: http://www.nabble.com/Struts-2-Container-Security-problem-tp15571409p22547426.html Sent from the Struts - User mailing list archive at Nabble.com

Struts 2 Container Security problem

2008-02-19 Thread Kelly Graus
Hi Everyone, I'm attempting to secure my first Struts 2 web app using container security with a DataSourceRealm. I'm using Tomcat 6 as my container. Here is how my project is setup: LicensingAdministration/ META-INF/ context.xml WEB-INF/ web.xml classes/

Re: Struts 2 Container Security problem

2008-02-19 Thread Martin Gainty
start here http://www.acegisecurity.org/guide/springsecurity.html M- - Original Message - From: Kelly Graus [EMAIL PROTECTED] To: user@struts.apache.org Sent: Tuesday, February 19, 2008 12:12 PM Subject: Struts 2 Container Security problem Hi Everyone, I'm attempting to secure my

Re: Struts 2 Container Security problem

2008-02-19 Thread Kelly Graus
Martin Gainty mgainty at hotmail.com writes: start here http://www.acegisecurity.org/guide/springsecurity.html M- Thank you for the response. I looked at Acegi, but it seemed overly complex for my requirements. This application is just a simple in house administration tool (and learning

Re: Struts 2 Container Security problem

2008-02-19 Thread Jeromy Evans
Hi Kelly, In struts.xml, the namespace given to your package needs be in /protected as well. eg. package name=myPackage namespace=/protected Otherwise, as you've seen, it's available in the root of the application's context path. I usually split my struts2 application into at least two

Re: Struts 2 Container Security problem

2008-02-19 Thread Kelly Graus
Jeromy Evans jeromy.evans at blueskyminds.com.au writes: Hi Kelly, In struts.xml, the namespace given to your package needs be in /protected as well. eg. package name=myPackage namespace=/protected Otherwise, as you've seen, it's available in the root of the application's context

Re: Struts 2 Container Security problem

2008-02-19 Thread Dave Newton
--- Kelly Graus [EMAIL PROTECTED] wrote: I would add a login action to the public namespace which prepares a login page. Unfortunately I don't think the container will allow you to specify /login.action as the login page though, but you can make login.jsp redirect to it. According

Re: Struts 2 Container Security problem

2008-02-19 Thread Jeromy Evans
I would add a login action to the public namespace which prepares a login page. Unfortunately I don't think the container will allow you to specify /login.action as the login page though, but you can make login.jsp redirect to it. According to Practical Apache Struts 2, this should be

Re: Struts 2 Container Security problem

2008-02-19 Thread Kelly Graus
Jeromy Evans jeromy.evans at blueskyminds.com.au writes: I would add a login action to the public namespace which prepares a login page. Unfortunately I don't think the container will allow you to specify /login.action as the login page though, but you can make login.jsp redirect

Re: Struts 2 Container Security problem

2008-02-19 Thread Jeromy Evans
Wes Wannemacher wrote: I'm jumping in late, so if I refer to something that came up in a previous post, I apologize ahead of time. I'm guessing that you're using tomcat. Tomcat is picky about certain things being actual filesystem resources. There are two possible solutions (if I'm right about

Re: Struts 2 Container Security problem

2008-02-19 Thread Wes Wannemacher
On Wed, 2008-02-20 at 00:43 +, Kelly Graus wrote: Jeromy Evans jeromy.evans at blueskyminds.com.au writes: [snip] I would add a login action to the public namespace which prepares a login page. Unfortunately I don't think the container will allow you to specify /login.action as

Re: Struts 2 Container Security problem

2008-02-19 Thread Laurie Harper
Wes Wannemacher wrote: On Wed, 2008-02-20 at 00:43 +, Kelly Graus wrote: Jeromy Evans jeromy.evans at blueskyminds.com.au writes: [snip] I would add a login action to the public namespace which prepares a login page. Unfortunately I don't think the container will allow you to specify

Re: Struts 2 Container Security problem

2008-02-19 Thread Dave Newton
--- Jeromy Evans [EMAIL PROTECTED] wrote: Wes Wannemacher wrote: In this case a 0-byte file called login.action may do the trick. It's a bit of a hack, and I think when this comes up with the Tomcat peeps, they point to the spec. Excellent! I loathe using a redirect. This probably

Re: Struts 2 Container Security problem

2008-02-19 Thread Wes Wannemacher
On Tue, 2008-02-19 at 17:56 -0800, Dave Newton wrote: --- Jeromy Evans [EMAIL PROTECTED] wrote: Wes Wannemacher wrote: In this case a 0-byte file called login.action may do the trick. It's a bit of a hack, and I think when this comes up with the Tomcat peeps, they point to the spec.

Re: Struts 2 Container Security problem

2008-02-19 Thread Kelly Graus
Wes Wannemacher wesw at wantii.com writes: I'm jumping in late, so if I refer to something that came up in a previous post, I apologize ahead of time. I'm guessing that you're using tomcat. Tomcat is picky about certain things being actual filesystem resources. There are two possible