Re: Security Realms and form-login-page

2008-01-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Albrecht, Albretch Mueller wrote: |> Let me get this straight: you want to create a webapp that does nothing |> other than authenticate connections for another webapp? |> |> Why would you want to do something like this? | ~ | Well, what else would y

Re: Security Realms and form-login-page

2008-01-21 Thread Albretch Mueller
> Let me get this straight: you want to create a webapp that does nothing > other than authenticate connections for another webapp? > > Why would you want to do something like this? ~ Well, what else would you do if: ~ * you maintain a number of name-based virtual hosts (of your own and for devel

Re: Security Realms and form-login-page

2008-01-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Albrecht, Albretch Mueller wrote: | How could you then specify a different (virtual) host accepting only | https connections, that would authenticate the user and then somehow | communicate to the particular webapp Sec Realm so the user is | authenti

Re: Security Realms and form-login-page

2008-01-21 Thread Albretch Mueller
On Jan 20, 2008 9:59 AM, Martin Gainty <[EMAIL PROTECTED]> wrote: > are you using apache as front-end? > or are you relying on the https connector? > Martin- ~ I am using apache as front-end ~ lbrtchx ~ - To start a new topic,

Security Realms and form-login-page

2008-01-19 Thread Albretch Mueller
On page 120 of the servlet spec., it is stated referring to the element in the section of an application's web.xml: ~ The form-login-page element defines the location in the web app where the page that can be used for login can be found. The path begins with a leading / and is interpreted relat