Re: Single-sign on without form-based authentication

2007-08-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lb, lightbulb432 wrote: > Anytime I want to use more than two credentials, I have to provide my > own Realm implementation. But the only time I need to do the String > concatentation is when at least one of the additional credentials > (i.e. beyond u

Re: Single-sign on without form-based authentication

2007-08-30 Thread lightbulb432
appId="application-1" /> > > Just make sure you have setAppId and getAppId methods on your Realm > implementation, and then use them when you build your SQL query to > verify a login. > > - -chris > -BEGIN PGP SIGNATURE- > Version: GnuPG

Re: Single-sign on without form-based authentication

2007-08-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lb, lightbulb432 wrote: > Views would definitely allow me to keep the two tables separate, but then I'd > have to authenticate against the two source tables separately (i.e. each > application would point to the source table rather than to the view).

Re: Single-sign on without form-based authentication

2007-08-30 Thread lightbulb432
dev.org > > iD8DBQFG1sVh9CaO5/Lv0PARAjCcAJ4gF601g5wChd1FQ1TodzPjKuQmpACgsEqq > nD8wKTUJVWYkc5eGnA/mXt8= > =FMuk > -END PGP SIGNATURE- > > - > To start a new topic, e-mail: users@tomcat.apache.org > To unsubscribe, e-mail: [EMAIL PROTECTED] > For addit

Re: Single-sign on without form-based authentication

2007-08-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lb, lightbulb432 wrote: > The requirement doesn't accept having two tables (i.e. userTableA and > userTableB), partly because increased maintenance, the possibility of table > definitions going out of sync, etc. CREATE VIEW, anyone? - -chris -B

Re: Single-sign on without form-based authentication

2007-08-29 Thread lightbulb432
to re-think the > design of your application. -- View this message in context: http://www.nabble.com/Single-sign-on-without-form-based-authentication-tf3805975.html#a12374143 Sent from the Tomcat - User mailing list archive at Nabble.com. --

Re: Single-sign on without form-based authentication

2007-05-24 Thread Gregor Schneider
well, we can't tell you the whole desigh of your_app-to-be but gave you some starting-points. now it's up to you to use them. however, i do not see any sense at all passing more tha two credentials (user, pass) to authenticate therefore, i suggest first thing you should do is to re-think the

Re: Single-sign on without form-based authentication

2007-05-24 Thread lightbulb432
--- > To start a new topic, e-mail: users@tomcat.apache.org > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > > -- View this message in co

Re: Single-sign on without form-based authentication

2007-05-24 Thread Gregor Schneider
at least you've saved *half* of the time ;) cheers greg -- what's puzzlin' you, is the nature of my game gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2 gpgp-key available @ http://pgpkeys.pca.dfn.de:11371 - To start a new to

Re: Single-sign on without form-based authentication

2007-05-24 Thread Pid
Gregor Schneider wrote: Well, subclassing FormAuthenticator would be a hack, a Tomcat-only-solution and inho a bad one. therefore, take a look at JAASRealm and try to combine it with your existing login-procedure, meaning - Implement a JAASRealm - get the credentials from there (user, password)

Re: Single-sign on without form-based authentication

2007-05-24 Thread Gregor Schneider
Well, subclassing FormAuthenticator would be a hack, a Tomcat-only-solution and inho a bad one. therefore, take a look at JAASRealm and try to combine it with your existing login-procedure, meaning - Implement a JAASRealm - get the credentials from there (user, password) - do the JAAS-Authentica

Re: Single-sign on without form-based authentication

2007-05-24 Thread lightbulb432
ca.dfn.de:11371 > > - > To start a new topic, e-mail: users@tomcat.apache.org > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > >

Re: Single-sign on without form-based authentication

2007-05-24 Thread Gregor Schneider
in $CATALINA_HOME/server/lib/catalina.jar there's a file "catalina.properties". There your will find the following entries: BASIC=org.apache.catalina.authenticator.BasicAuthenticator CLIENT-CERT=org.apache.catalina.authenticator.SSLAuthenticator DIGEST=org.apache.catalina.authenticator.DigestAuth

Re: Single-sign on without form-based authentication

2007-05-24 Thread lightbulb432
mail: [EMAIL PROTECTED] > > > -- View this message in context: http://www.nabble.com/Single-sign-on-without-form-based-authentication-tf3805975.html#a10785065 Sent from the Tomcat - User mailing list archive at Nabble.com. --

Re: Single-sign on without form-based authentication

2007-05-24 Thread Gregor Schneider
You could call the authenticate()-method from Tomcat's FormAuthenticator: http://tomcat.apache.org/tomcat-5.0-doc/catalina/docs/api/org/apache/catalina/authenticator/FormAuthenticator.html#authenticate(org.apache.catalina.HttpRequest,%20org.apache.catalina.HttpResponse,%20org.apache.catalina.depl

Single-sign on without form-based authentication

2007-05-23 Thread lightbulb432
would like to perhaps customize the login process (requiring more than just a j_username and j_password). How can I do this? Thanks. -- View this message in context: http://www.nabble.com/Single-sign-on-without-form-based-authentication-tf3805975.html#a10770906 Sent from the Tomcat - User mailing