RE: Form Based Authentication

2005-10-11 Thread Peter Bright
> -Original Message- > From: Caldarale, Charles R [mailto:[EMAIL PROTECTED] > Sent: 11 October 2005 17:23 > To: Tomcat Users List > Subject: RE: Form Based Authentication > > > From: Peter Bright [mailto:[EMAIL PROTECTED] > > Subject:

RE: Form Based Authentication

2005-10-11 Thread Peter Bright
> -Original Message- > From: Caldarale, Charles R [mailto:[EMAIL PROTECTED] > Sent: 11 October 2005 17:18 > To: Tomcat Users List > Subject: RE: Form Based Authentication > > > From: Peter Bright [mailto:[EMAIL PROTECTED] > > Subject: Form Based Authenti

Form Based Authentication

2005-10-11 Thread Peter Bright
Hello, We're currently using form-based authentication (i.e. FORM) but, as I suspect many people have found, it's rather limited. One requirement we have is enforced password changes in certain scenarios. Currently the approach we were thinking of using is as follows: a) the realm recognizes