-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Arash,
Arash Bizhan zadeh wrote: > Sure [reading the servlet API] might help. Reading my mail would have helped > too. I need the > Subject not the principal. Ouch. You're gonna get the cold shoulder with that kind of snarkiness. Your original message said "authenticated user" in the body. A quick look through Tomcat's source code shows: $ grep SUBJECT_ATTR `find java/ -name "*.java"` java/org/apache/catalina/connector/Request.java: session.getAttribute(Globals.SUBJECT_ATTR) == null) { java/org/apache/catalina/connector/Request.java: session.setAttribute(Globals.SUBJECT_ATTR, subject); java/org/apache/catalina/security/SecurityUtil.java: (Subject)session.getAttribute(Globals.SUBJECT_ATTR); java/org/apache/catalina/security/SecurityUtil.java: session.setAttribute(Globals.SUBJECT_ATTR, subject); java/org/apache/catalina/session/StandardSession.java: Globals.SUBJECT_ATTR java/org/apache/catalina/Globals.java: public static final String SUBJECT_ATTR = Taking a quick look at these classes shows that this: > getSession().getAttribute(Globals.SUBJECT_ATTR); should work. Of course, there's always a chance that the subject is null. In most cases in the code, when the Subject is null, a new Subject object is created with no arguments and thrown into the session under the Globals.SUBJECT_ATTR key. - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkkbWgUACgkQ9CaO5/Lv0PB7ywCfWsw8lOmT2rg85wddJ+n3C6xL PWsAn1KdKrcv+mErYjOjaNMAonGYE/yS =nnOG -----END PGP SIGNATURE----- --------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]