Re: FormAuthenticator, Tomcat restart

2015-06-18 Thread Leonid Rozenblyum
Thank you, Christopher! On Thu, Jun 11, 2015 at 4:34 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Leonid, On 6/11/15 4:18 AM, Leonid Rozenblyum wrote: Hello. Just to double-check. By writing own login-handler, do you mean,

Re: FormAuthenticator, Tomcat restart

2015-06-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Leonid, On 6/11/15 4:18 AM, Leonid Rozenblyum wrote: Hello. Just to double-check. By writing own login-handler, do you mean, overriding FormAuthenticator.authenticate() (looks risky since it's a big method which can change from one to another

Re: FormAuthenticator, Tomcat restart

2015-06-11 Thread Leonid Rozenblyum
Hello. Just to double-check. By writing own login-handler, do you mean, overriding FormAuthenticator.authenticate() (looks risky since it's a big method which can change from one to another Tomcat version)? Or are there more painless ways to inject such custom login handler? On Thu, May 28, 2015

Re: FormAuthenticator, Tomcat restart

2015-06-04 Thread Leonid Rozenblyum
On Fri, May 29, 2015 at 9:47 AM, André Warnier a...@ice-sa.com wrote: 20-odd Well the development team uses Tomcat via Eclipse and after changing some code they do Tomcat restart because more often than not, hot redeploy doesn't give good results. That's why Tomcat restart is a RATHER often

Re: FormAuthenticator, Tomcat restart

2015-05-29 Thread Leonid Rozenblyum
Hello, Christopher! I indeed meant this The Tomcat restart between showing and submitting the login page is the source of the problem. Your explanation clarifies the core of the issue well! I'll dig into the Tomcat documentation deeper to find out how to inject that custom login handler.

Re: FormAuthenticator, Tomcat restart

2015-05-29 Thread André Warnier
Leonid Rozenblyum wrote: Hello, Christopher! I indeed meant this The Tomcat restart between showing and submitting the login page is the source of the problem. Your explanation clarifies the core of the issue well! I'll dig into the Tomcat documentation deeper to find out how to inject that

Re: [OT] FormAuthenticator, Tomcat restart

2015-05-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 5/29/15 2:47 AM, André Warnier wrote: Leonid Rozenblyum wrote: Hello, Christopher! I indeed meant this The Tomcat restart between showing and submitting the login page is the source of the problem. Your explanation clarifies the

Re: FormAuthenticator, Tomcat restart

2015-05-28 Thread Mark Thomas
On 28/05/2015 10:22, Leonid Rozenblyum wrote: Hello experts. We are using FormAuthenticator and face a following issue: 1) Session persistence is disabled 2) User is on login page 3) Restart Tomcat 4) User tries authentication He receives error 400 or 408. While digging deeper we

FormAuthenticator, Tomcat restart

2015-05-28 Thread Leonid Rozenblyum
Hello experts. We are using FormAuthenticator and face a following issue: 1) Session persistence is disabled 2) User is on login page 3) Restart Tomcat 4) User tries authentication He receives error 400 or 408. While digging deeper we discovered that in this case Tomcat validates session id

Re: FormAuthenticator, Tomcat restart

2015-05-28 Thread Leonid Rozenblyum
Well the issue is that if user enters CORRECT credentials AFTER Tomcat restart he sees Error 400/408 On Thu, May 28, 2015 at 12:29 PM, Mark Thomas ma...@apache.org wrote: On 28/05/2015 10:22, Leonid Rozenblyum wrote: Hello experts. We are using FormAuthenticator and face a following issue:

Re: FormAuthenticator, Tomcat restart

2015-05-28 Thread Leonid Rozenblyum
The reason is : After Tomcat restart, and logging-in browser provides an old session id to server. FormAuthenticator treats it as an issue, and either sends error or landing page. On Thu, May 28, 2015 at 12:30 PM, Leonid Rozenblyum lrozenbl...@gmail.com wrote: Well the issue is that if user

Re: FormAuthenticator, Tomcat restart

2015-05-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 5/28/15 5:29 AM, Mark Thomas wrote: On 28/05/2015 10:22, Leonid Rozenblyum wrote: Hello experts. We are using FormAuthenticator and face a following issue: 1) Session persistence is disabled 2) User is on login page 3) Restart