Re: Authorization and Authentication

2011-03-18 Thread Jason Ferguson
I did a presentation on Spring Security for the local Java User Group, available at http://www.slideshare.net/jasonferguson1/spring-security-3. However, it won't replace the actual documentation, which I found to be very high quality. On Fri, Mar 18, 2011 at 11:11 AM, Alessio Bandini wrote: > Tha

Re: Authorization and Authentication

2011-03-18 Thread Alessio Bandini
Thank you all. I think I've something to read this week end. On 2011-03-18 16:34, Maurizio Cucchiara wrote: Alessio, start from here: http://static.springsource.org/spring-security/site/reference.html http://static.springsource.org/spring-security/site/start-here.html http://static.springsou

Re: Authorization and Authentication

2011-03-18 Thread Maurizio Cucchiara
Alessio, start from here: http://static.springsource.org/spring-security/site/reference.html http://static.springsource.org/spring-security/site/start-here.html http://static.springsource.org/spring-security/site/articles.html Spring security is well documented. Se dovessi avere problemi fai u

Re: Authorization and Authentication

2011-03-18 Thread Alessio Bandini
Thank you very much. Do you know some good books or web tutorial on spring security integration in Struts 2? On 2011-03-18 16:21, Jordi Fernandez wrote: Same advice here. Spring Security supports many authentication/authorization scenarios, can be extended and is well documented. On 3/18/11

Re: Authorization and Authentication

2011-03-18 Thread M.C. Wilson
Have you taken a look at Apache Shiro? http://shiro.apache.org On Mar 18, 2011 10:16 AM, "Alessio Bandini" wrote: > Hi, > > I'm new in Struts2. I'm starting to build a J2EE intranet application > using Struts2, and I'm thinking on a solution to manage auth

Re: Authorization and Authentication

2011-03-18 Thread Chris Pratt
And just for completeness Spring Security is the new name of Acegi. (*Chris*) On Fri, Mar 18, 2011 at 8:21 AM, Jordi Fernandez wrote: > Same advice here. Spring Security supports many > authentication/authorization scenarios, can be extended and is well > documented. > > > On 3/18/11 4:17 PM,

Re: Authorization and Authentication

2011-03-18 Thread Jordi Fernandez
Same advice here. Spring Security supports many authentication/authorization scenarios, can be extended and is well documented. On 3/18/11 4:17 PM, Dave Newton wrote: On Fri, Mar 18, 2011 at 11:16 AM, Alessio Bandini wrote: I read about Acegi in 2007, but maybe now there are others solutions

Re: Authorization and Authentication

2011-03-18 Thread Dave Newton
On Fri, Mar 18, 2011 at 11:16 AM, Alessio Bandini wrote: > I read about Acegi in 2007, but maybe now there are others solutions > among which I can select. I'd still aim at Spring Security, especially if you're already using Spring. Dave --

Authorization and Authentication

2011-03-18 Thread Alessio Bandini
Hi, I'm new in Struts2. I'm starting to build a J2EE intranet application using Struts2, and I'm thinking on a solution to manage authorization and authentication in the best possibile way. For "the best possibile way" I intend by using existing frame-works or plugin

Re: [OT] Authorization and Authentication Question

2009-03-11 Thread Lukasz Lenart
2009/3/11 Ashish Kulkarni : > HiI was able to configure LDAP to do authentication, but how do i use > UserDetailsService, > is there any example of how to use this and implement it in my project to > get user and role from DB2 database I did that like this, extended DefaultLdapAuthoritiesPopulator

Re: [OT] Authorization and Authentication Question

2009-03-11 Thread Wes Wannemacher
On Wed, Mar 11, 2009 at 3:23 PM, Ashish Kulkarni wrote: > HiI was able to configure LDAP to do authentication, but how do i use > UserDetailsService, > is there any example of how to use this and implement it in my project to > get user and role from DB2 database > > UserDetailsService is an inte

Re: [OT] Authorization and Authentication Question

2009-03-11 Thread Ashish Kulkarni
ot;petshop" >> tutorial >> page got me going. >> >> -Original Message- >> From: Ashish Kulkarni [mailto:ashish.kulkarn...@gmail.com] >> Sent: Wednesday, March 11, 2009 9:53 AM >> To: Struts Users Mailing List >> Subject: Re: [OT] Authorization and Authe

Re: [OT] Authorization and Authentication Question

2009-03-11 Thread Ashish Kulkarni
ing. > > -Original Message- > From: Ashish Kulkarni [mailto:ashish.kulkarn...@gmail.com] > Sent: Wednesday, March 11, 2009 9:53 AM > To: Struts Users Mailing List > Subject: Re: [OT] Authorization and Authentication Question > > HiThanks for the suggestion, this applicatio

RE: [OT] Authorization and Authentication Question

2009-03-11 Thread Security Management
I got it working in less than a day using the docs. The "petshop" tutorial page got me going. -Original Message- From: Ashish Kulkarni [mailto:ashish.kulkarn...@gmail.com] Sent: Wednesday, March 11, 2009 9:53 AM To: Struts Users Mailing List Subject: Re: [OT] Authori

Re: [OT] Authorization and Authentication Question

2009-03-11 Thread Wes Wannemacher
Spring Security is it's own filter, and my experience is that it is pretty easy to integrate with just about any type of web-app. As far as existing tutorials, I'd say to check google. -Wes On Wed, Mar 11, 2009 at 9:52 AM, Ashish Kulkarni wrote: > HiThanks for the suggestion, this application wh

Re: [OT] Authorization and Authentication Question

2009-03-11 Thread Ashish Kulkarni
HiThanks for the suggestion, this application which i need to do this is developed using Struts 1.2.6, can i add Spring Security to this, just as a drop in, is there any how to documents to add spring support to struts web application Ashish On Tue, Mar 10, 2009 at 7:43 PM, Jim Kiley wrote: > I

Re: [OT] Authorization and Authentication Question

2009-03-10 Thread Jim Kiley
I'd agree. Have your UserDetailsService implementation hit LDAP for authentication, and pass GrantedAuthorities[] on to the returned object by asking DB2 about that info if the user is authenticated. jk On Tue, Mar 10, 2009 at 6:44 PM, Wes Wannemacher wrote: > On Tuesday 10 March 2009 17:56:30

Re: [OT] Authorization and Authentication Question

2009-03-10 Thread Wes Wannemacher
On Tuesday 10 March 2009 17:56:30 Ashish Kulkarni wrote: > HiIs it possible to Authenticate user using LDAP, but authorize using a DB2 > database, > I have situation where i need to authenticate and authorize some web pages. > > I want to authenticate users against LDAP, but have to maintain > auth

[OT] Authorization and Authentication Question

2009-03-10 Thread Ashish Kulkarni
HiIs it possible to Authenticate user using LDAP, but authorize using a DB2 database, I have situation where i need to authenticate and authorize some web pages. I want to authenticate users against LDAP, but have to maintain authorization list, roles etc in DB2 database Has anyone done anything

Re: seeking advice on authorization and authentication

2005-04-25 Thread delbd
Here we have application using struts and giving priviledges to some users or some roles. We rely on container security to handle login. We simply put a link to /jsp/admin which redirects to the / and, in web.xml, we ask for everything under /jsp/admin to require authentification. This way requ

Re: seeking advice on authorization and authentication

2005-04-25 Thread Dave Newton
Scott Purcell wrote: I am creating a shopping-cart type application using struts and have a question. The site itself does not have any authentication on it, as people just browse and add stuff to the cart. But the site does require some data manipulation into the database. Upon thinking about t

Re: seeking advice on authorization and authentication

2005-04-25 Thread Michael Jouravlev
In our application we used what we called "guard tag". It is a simple custom tag, which contains something like this: HttpSession session = pageContext.getSession(); String userID = (String)session.getAttribute(Constants.USERID_KEY); We put this tag in the beginning of a page: If there is

Re: seeking advice on authorization and authentication

2005-04-25 Thread Erik Weber
http://java.sun.com/j2ee/1.4/docs/tutorial/doc/ Chapter 32: Security Should help. Erik Scott Purcell wrote: I am creating a shopping-cart type application using struts and have a question. The site itself does not have any authentication on it, as people just browse and add stuff to the cart. But

seeking advice on authorization and authentication

2005-04-25 Thread Scott Purcell
I am creating a shopping-cart type application using struts and have a question. The site itself does not have any authentication on it, as people just browse and add stuff to the cart. But the site does require some data manipulation into the database. Upon thinking about this, I would like t

RE: Authorization and Authentication in Struts

2004-07-05 Thread ravi.vedala
Just FYI : JGuard is an open source JAAS implementation. Regds r-a-v-i -Original Message- From: Shilpa Vaidya [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 06, 2004 9:50 AM To: 'Struts Users Mailing List' Cc: [EMAIL PROTECTED] Subject: RE: Authorization and Authentication in

RE: Authorization and Authentication in Struts

2004-07-05 Thread Shilpa Vaidya
Hi , On these lines you can do Authorization and Authentication in Struts. But it calls the tomcat 404 page, I am still doubtful as how to call a customised page in this regards. Can anyone help. The below portion of code i believe should help in the given context. Shilpa private boolean _403

Authorization and Authentication in Struts

2004-07-05 Thread Hal Klimer
I have a question on how to implement authorization and authentication with the Struts framework. In several DB tables we have users, groups, permissions, acls, etc where the security information is stored. We would like to integrate this information, in the best possible way with Struts. From