Re: Security and Authentication

2005-11-17 Thread B Wiley Snyder
try this ... java.security.Principal Principal pri; pri = request.getUserPrincipal(); that's the only way I know of, unless you use some javascript to save the login in the session on the form ... -Wiley java.security.PiAt 04:13 PM 11/17/2005, you wrote: I am using Tomcat Form-base

Re: Is this good flow control?

2005-11-04 Thread B Wiley Snyder
Howdy, So are you basically implementing your own authentication system instead of using the one that comes with tomcat ? If your just starting out figure out how to use the one that comes with tomcat before you make your own. At 05:19 PM 11/4/2005, you wrote: Hi all, I thought that once

RE: Securing Manager Role

2005-10-26 Thread B Wiley Snyder
Greetings Mark, Got it ;) thanks again ... At 06:18 PM 10/26/2005, you wrote: Sorry, as has been pointed out my response isn't correct. Digesting the passwords is supported - see the docs. Where encrypting passwords is not supported is for external resources such as databases. Mark > -O

RE: j_security_check

2005-10-26 Thread B Wiley Snyder
Greetings, This is a big help ... http://svn.apache.org/repos/asf/tomcat/container/tc5.5.x/catalina/src/share/org/apache/catalina/authenticator/FormAuthenticator.java thank you ! also, There isn't a j_security_check servlet. <- then why does it act like one ? The places to start are: - se

j_security_check

2005-10-26 Thread B Wiley Snyder
Greetings, Anybody here know a post or a link to something that might help me understand exactly how j_security_check works? Where is the j_security_check servlet ? The source code etc... conf files or a full breakdown step by step of what it's doing and where ? ... gracias --