Re: S2 custom authentication: remembering original request

2013-07-18 Thread Antonio Sánchez
ion text parameters. I don't know how binary data is transported in > > the request. I headers are involved then they need to be saved too. > > > > > > > > >>One more question: What should I do in case the original request is a > > > multipart requ

RE: S2 custom authentication: remembering original request

2013-07-16 Thread Dave Newton
On Jul 16, 2013 5:20 AM, "Martin Gainty" wrote: > > be careful when storing params into session during redirect > > remember redirect invalidates the original session and creates a brand new session from client's browser That would mean if you redirected you'd be logged out every time. That would

Re: S2 custom authentication: remembering original request

2013-07-16 Thread Antonio Sánchez
se); > > Mime-mappings are set in web.xml as seen here > > mysuffix > mymime/type > > --> > > or in mime.properties > > > ______ > > > > > > Date: Tue, 16 Jul

Re: S2 custom authentication: remembering original request

2013-07-16 Thread Antonio Sánchez
saving > > in session text parameters. I don't know how binary data is transported in > > the request. I headers are involved then they need to be saved too. > > > > > > > > >>One more question: What should I do in case the original request is a &g

RE: S2 custom authentication: remembering original request

2013-07-16 Thread Martin Gainty
Mime-mappings are set in web.xml as seen here mysuffix mymime/type --> or in mime.properties Martin Gainty __ > Date: Tue, 16 Jul 2013 09:16:12 +0100 > Subject: Re: S2 custom authentication: remembering original request

Re: S2 custom authentication: remembering original request

2013-07-16 Thread Antonios Gkogkakis
ving > in session text parameters. I don't know how binary data is transported in > the request. I headers are involved then they need to be saved too. > > > > > >>One more question: What should I do in case the original request is a > > multipart reque

Re: S2 custom authentication: remembering original request

2013-07-16 Thread Antonio Sánchez
t; multipart request? For instance: select picture -> click upload -> > >>authentication -> upload action. > > > On 15 July 2013 18:19, Antonio Sánchez wrote: > > > Hi Antonios. Thank you very much. > > > > I was using > > > > invocation

Re: S2 custom authentication: remembering original request

2013-07-16 Thread Antonios Gkogkakis
Hi Antonio, I don't see anything different with the multipart requests, are you experiencing issues? >>One more question: What should I do in case the original request is a multipart request? For instance: select picture -> click upload -> >>authentication -> upload ac

Re: S2 custom authentication: remembering original request

2013-07-15 Thread Antonio Sánchez
nstance: select picture -> click upload -> authentication -> upload action. El Lunes, 15 de julio de 2013 10:29:26 Antonios Gkogkakis escribió: > Hi Antonio, > > You can't modify the parameter map from the Servlet request, but you can > pass the extra params from your first

Re: S2 custom authentication: remembering original request

2013-07-15 Thread Antonios Gkogkakis
ere any > > > value then simply forward to that action. else if login is required > > > redirect it to the login page. > > > > > > If 'redirectto' url parameter is blank and login is success then > forward it > > > to the home page. > >

Re: S2 custom authentication: remembering original request

2013-07-15 Thread Antonio Sánchez
l parameter is blank and login is success then forward it > > to the home page. > > > > > > > > > > On Wed, Jul 10, 2013 at 5:57 PM, Antonio Sánchez > > wrote: > > > > > Use Case: request some protected resource -> redirect action

Re: S2 custom authentication: remembering original request

2013-07-12 Thread Antonio Sánchez
7; url parameter is blank and login is success then forward it > to the home page. > > > > > On Wed, Jul 10, 2013 at 5:57 PM, Antonio Sánchez > wrote: > > > Use Case: request some protected resource -> redirect action for > > authentication -> acces

Re: S2 custom authentication: remembering original request

2013-07-12 Thread Antonio Sánchez
t; > > > > > > > > > > /autenticar > > > > > > > > > > > > > > > > > > http://localhost:8084/mycontext/forward => 404 ERROR - > > > > > > /mycontext/autenticar not

Re: S2 custom authentication: remembering original request

2013-07-12 Thread Antonios Gkogkakis
gt; > > > /mycontext/autenticar not available > > > > > > > > > > Which is the right way to forward to actions? > > > > > > > > > > Using 2.3.15. > > > > > > > > > > El Miércoles, 10 de julio de 201

Re: S2 custom authentication: remembering original request

2013-07-12 Thread Antonio Sánchez
> > > > > Second question: because it's a redirect, hence a new request. > > > > > > > > > > http://localhost:8084/mycontext/autenticar => login.jsp - OK > > > > > > > > > > Returned by interceptor: > > > > >

Re: S2 custom authentication: remembering original request

2013-07-12 Thread Antonios Gkogkakis
e it's a redirect, hence a new request. > > > > > > > > http://localhost:8084/mycontext/autenticar => login.jsp - OK > > > > > > > > Returned by interceptor: > > > > > > > > > > > > /autenticar

Re: S2 custom authentication: remembering original request

2013-07-12 Thread Antonio Sánchez
> > > > > > > > > http://localhost:8084/mycontext/admin/protected => 404 ERROR - > > /mycontext/autenticar not available > > > > > > How should I "forward" to actions? > > > > > > > > > > > > El M

Re: S2 custom authentication: remembering original request

2013-07-12 Thread Rahul Tokase
rd to that action. else if login is required redirect it to the login page. If 'redirectto' url parameter is blank and login is success then forward it to the home page. On Wed, Jul 10, 2013 at 5:57 PM, Antonio Sánchez wrote: > Use Case: request some protected resource -> redirect a

Re: S2 custom authentication: remembering original request

2013-07-12 Thread Antonios Gkogkakis
/autenticar > > > > > > > > > > > > > > > http://localhost:8084/mycontext/admin/protected => 404 ERROR - > > > > /mycontext/autenticar not available > > > > > > > > > > How should I "forwar

Re: S2 custom authentication: remembering original request

2013-07-12 Thread Antonio Sánchez
/autenticar > > > > > > > > > > > > http://localhost:8084/mycontext/admin/protected => 404 ERROR - > > > /mycontext/autenticar not available > > > > > > > > How should I "forward" to actions? > &

Re: S2 custom authentication: remembering original request

2013-07-10 Thread Dave Newton
gt; > > > > > El Miércoles, 10 de julio de 2013 07:43:38 Dave Newton escribió: > > > > Second question: because it's a redirect, hence a new request. > > > > > > > > Dave > > > > On Jul 10, 2013 7:28 AM, "Antonio Sánchez"

Re: S2 custom authentication: remembering original request

2013-07-10 Thread Paul Benedict
s, 10 de julio de 2013 07:43:38 Dave Newton escribió: > > > Second question: because it's a redirect, hence a new request. > > > > > > Dave > > > On Jul 10, 2013 7:28 AM, "Antonio Sánchez" > > > > > > wrote: > > > > Use C

Re: S2 custom authentication: remembering original request

2013-07-10 Thread Antonio Sánchez
8 Dave Newton escribió: > > Second question: because it's a redirect, hence a new request. > > > > Dave > > On Jul 10, 2013 7:28 AM, "Antonio Sánchez" > > > > wrote: > > > Use Case: request some protected resource -> redirect action for >

Re: S2 custom authentication: remembering original request

2013-07-10 Thread Antonio Sánchez
piece? I can only think of storing in session original headers, parameters, inputstream... This is not a rare use case. For example, using the system for uploading a picture, the user clicks submit but authentication is required for this operation. After successful authentication, the original r

Re: S2 custom authentication: remembering original request

2013-07-10 Thread Antonio Sánchez
> > Use Case: request some protected resource -> redirect action for > > authentication -> access protected resource. > > > > I'm using a custom interceptor that redirects (redirectAction) to a global > > result if no user object is found in session. The final a

Re: S2 custom authentication: remembering original request

2013-07-10 Thread CRANFORD, CHRIS
It should definitely be possible because what you described is out of the box functionality in Spring Security where their concept of intercepters is a filter. I would recommend that if you need a complete authentication and permissions checking functionality to look into Spring Security. We

Re: S2 custom authentication: remembering original request

2013-07-10 Thread Dave Newton
Second question: because it's a redirect, hence a new request. Dave On Jul 10, 2013 7:28 AM, "Antonio Sánchez" wrote: > Use Case: request some protected resource -> redirect action for > authentication -> access protected resource. > > I'm usi

S2 custom authentication: remembering original request

2013-07-10 Thread Antonio Sánchez
Use Case: request some protected resource -> redirect action for authentication -> access protected resource. I'm using a custom interceptor that redirects (redirectAction) to a global result if no user object is found in session. The final action result then redirects to a login

Re: Struts2 authentication, validation, and roles

2012-10-04 Thread Łukasz Lenart
2012/10/3 Ken McWilliams : > Asking for the consideration of a struts2 feature enhancement. > > The roles interceptor depends on container based security, it is a bit > of a pain to set up and portability is complicated by needing to cover > more documentation steps (how to secure your application

Re: Struts2 authentication, validation, and roles

2012-10-03 Thread Gabriel Belingueres
Hi: I took a look at the ServletPrincipalProxy class, and it just delegates to the current request object to resolve authorization queries. There is not much more to do, since it is how the servlet standard is defined (the HttpServletRequest interface is the only one to query). So implementing a

Re: Struts2 authentication, validation, and roles

2012-10-02 Thread Lukasz Lenart
2012/10/3 Ken McWilliams : > Asking for the consideration of a struts2 feature enhancement. > > The roles interceptor depends on container based security, it is a bit > of a pain to set up and portability is complicated by needing to cover > more documentation steps (how to secure your application

Struts2 authentication, validation, and roles

2012-10-02 Thread Ken McWilliams
Asking for the consideration of a struts2 feature enhancement. The roles interceptor depends on container based security, it is a bit of a pain to set up and portability is complicated by needing to cover more documentation steps (how to secure your application on Glassfish, Weblogic, Tomcat...).

Re: Authentication and authorization

2012-04-19 Thread M. Rakowski
a brief explanation for basic spring-security (only authentication) configuration with struts: Spring security is running as a filter in your web-app (you need to make sure that it comes first before Struts). For the filter-configuration take a look at (2.2.1): http://static.springsource.org

Re: Authentication and authorization

2012-04-17 Thread Aravind Kumar
t; IMHO go with Spring Security: > http://static.springsource.**org/spring-security/site/<http://static.springsource.org/spring-security/site/> > > It is pretty easy to integrate in Struts and > provides everything you need for both

Re: Authentication and authorization

2012-04-17 Thread M. Rakowski
Hey, i would definitely _discourage_ you from using JAAS. IMHO go with Spring Security: http://static.springsource.org/spring-security/site/ It is pretty easy to integrate in Struts and provides everything you need for both authentication and authorization

Re: Authentication and authorization

2012-04-17 Thread Aravind Kumar
thank you :) On Tue, Apr 17, 2012 at 9:21 PM, Chris Pratt wrote: > Struts itself doesn't provide an Authentication & Authorization subsystem, > but it will work well with Spring Security, Apache Shiro, or roll-your-own > solutions. > (*Chris*) > > On Tue, Apr 17, 201

Re: Authentication and authorization

2012-04-17 Thread Chris Pratt
Struts itself doesn't provide an Authentication & Authorization subsystem, but it will work well with Spring Security, Apache Shiro, or roll-your-own solutions. (*Chris*) On Tue, Apr 17, 2012 at 5:28 AM, Aravind Kumar wrote: > Hello, > > I have just started to venture in

Re: Authentication and authorization

2012-04-17 Thread Aravind Kumar
Thank you ! And Apache Shiro is it worth trying for authentication and authorization ? On Tue, Apr 17, 2012 at 6:37 PM, vEnkaTa mohAna rAo SriperumbUdUru < mohanara...@gmail.com> wrote: > http://www.javaranch.com/journal/2008/04/authentication-using-JAAS.html > > > http:/

Re: Authentication and authorization

2012-04-17 Thread vEnkaTa mohAna rAo SriperumbUdUru
http://www.javaranch.com/journal/2008/04/authentication-using-JAAS.html http://stackoverflow.com/questions/3649615/how-should-i-savely-store-encrypted-user-data-on-my-server-and-serve-it-only-to On Tue, Apr 17, 2012 at 5:58 PM, Aravind Kumar wrote: > Hello, > > I have just started t

Authentication and authorization

2012-04-17 Thread Aravind Kumar
Hello, I have just started to venture into Struts2 and I'm having a hard time finding learning materials for "Authentication and authorization" concepts. Could you please point out some resources ? Thank you, Aravind

Re: Authorization and Authentication

2011-03-18 Thread Jason Ferguson
16:30, Alessio Bandini  wrote: >>> >>> Thank you very much. >>> >>> Do you know some good books or web tutorial on spring security >>> integration >>> in Struts 2? >>> >>> On 2011-03-18 16:21, Jordi Fernandez wrote: >>

Re: Authorization and Authentication

2011-03-18 Thread Alessio Bandini
03-18 16:21, Jordi Fernandez wrote: Same advice here. Spring Security supports many authentication/authorization scenarios, can be extended and is well documented. On 3/18/11 4:17 PM, Dave Newton wrote: On Fri, Mar 18, 2011 at 11:16 AM, Alessio Bandini wrote: I read about Acegi in 2007, but

Re: Authorization and Authentication

2011-03-18 Thread Maurizio Cucchiara
un fischio :) On 18 March 2011 16:30, Alessio Bandini wrote: > Thank you very much. > > Do you know some good books or web tutorial on spring security integration > in Struts 2? > > On 2011-03-18 16:21, Jordi Fernandez wrote: >> >> Same advice here. Spring Security s

Re: Authorization and Authentication

2011-03-18 Thread Alessio Bandini
Thank you very much. Do you know some good books or web tutorial on spring security integration in Struts 2? On 2011-03-18 16:21, Jordi Fernandez wrote: Same advice here. Spring Security supports many authentication/authorization scenarios, can be extended and is well documented. On 3/18/11

Re: Authorization and Authentication

2011-03-18 Thread M.C. Wilson
Have you taken a look at Apache Shiro? http://shiro.apache.org On Mar 18, 2011 10:16 AM, "Alessio Bandini" wrote: > Hi, > > I'm new in Struts2. I'm starting to build a J2EE intranet application > using Struts2, and I'm thinking on a solution to manage auth

Re: Authorization and Authentication

2011-03-18 Thread Chris Pratt
And just for completeness Spring Security is the new name of Acegi. (*Chris*) On Fri, Mar 18, 2011 at 8:21 AM, Jordi Fernandez wrote: > Same advice here. Spring Security supports many > authentication/authorization scenarios, can be extended and is well > documented. > > >

Re: Authorization and Authentication

2011-03-18 Thread Jordi Fernandez
Same advice here. Spring Security supports many authentication/authorization scenarios, can be extended and is well documented. On 3/18/11 4:17 PM, Dave Newton wrote: On Fri, Mar 18, 2011 at 11:16 AM, Alessio Bandini wrote: I read about Acegi in 2007, but maybe now there are others solutions

Re: Authorization and Authentication

2011-03-18 Thread Dave Newton
On Fri, Mar 18, 2011 at 11:16 AM, Alessio Bandini wrote: > I read about Acegi in 2007, but maybe now there are others solutions > among which I can select. I'd still aim at Spring Security, especially if you're already using Spring. Dave --

Authorization and Authentication

2011-03-18 Thread Alessio Bandini
Hi, I'm new in Struts2. I'm starting to build a J2EE intranet application using Struts2, and I'm thinking on a solution to manage authorization and authentication in the best possibile way. For "the best possibile way" I intend by using existing frame-works or plugin

Re: Authorization/ Authentication

2010-12-28 Thread Wendy Smoak
On Tue, Dec 28, 2010 at 11:10 AM, Amol Ghotankar wrote: > Even I am searching for some better way in which authentication can be done > using struts2 or spring security toghether. You might want to look at Codehaus Redback. Even if you end up not using it, you might find some ideas

Re: Authorization/ Authentication

2010-12-28 Thread Brian Thompson
blem. Any Design Pattern > > or s*omething > > in struts that can help me here* or something other advice for it? > > > > > > > > > > On Tue, Dec 28, 2010 at 10:01 PM, Dave Newton > > wrote: > > > > > On Tue, Dec 28, 2010 at 11:10 AM,

Re: Authorization/ Authentication

2010-12-28 Thread stanlick
olve this problem. Any Design Pattern > or s*omething > in struts that can help me here* or something other advice for it? > > > > > On Tue, Dec 28, 2010 at 10:01 PM, Dave Newton > wrote: > > > On Tue, Dec 28, 2010 at 11:10 AM, Amol Ghotankar < >

Re: Authorization/ Authentication

2010-12-28 Thread Amol Ghotankar
2010 at 10:01 PM, Dave Newton wrote: > On Tue, Dec 28, 2010 at 11:10 AM, Amol Ghotankar >wrote: > > > Even I am searching for some better way in which authentication can be > done > > using struts2 or spring security toghether. > > > > No direct or simple examp

Re: Authorization/ Authentication

2010-12-28 Thread Dave Newton
On Tue, Dec 28, 2010 at 11:10 AM, Amol Ghotankar wrote: > Even I am searching for some better way in which authentication can be done > using struts2 or spring security toghether. > > No direct or simple example to explain it working together. > > Specially for these two cases

Re: Authorization/ Authentication

2010-12-28 Thread Amol Ghotankar
Hello, Even I am searching for some better way in which authentication can be done using struts2 or spring security toghether. No direct or simple example to explain it working together. Specially for these two cases where 1. which user can access which action, is stored in database

Re: Authorization/ Authentication

2010-12-27 Thread Greg Akins
On Mon, Dec 27, 2010 at 8:36 AM, Jordi Fernandez wrote: > Have you considered Spring Security? > http://static.springsource.org/spring-security/site/ No.. I'll have to read a bit more; but my first guess is that I'd have to do some refactoring of some legacy code ( I need to use the same underlyi

Re: Authorization/ Authentication

2010-12-27 Thread Greg Akins
On Mon, Dec 27, 2010 at 8:59 AM, Dave Newton wrote: > (Let me clarify slightly.) > OK, I think I understand. The Interceptor should check if the session is authenticated, but should perform the Login. That's what I would have done, so maybe that's what confused me. Thanks for clearing that up.

Re: Authorization/ Authentication

2010-12-27 Thread Dave Newton
(Let me clarify slightly.) On Mon, Dec 27, 2010 at 8:38 AM, Dave Newton wrote: > Why/how did it confuse you? Login shouldn't be /performed/ by an > interceptor, an interceptor should check if a user has logged in for a given > resource and if not redirect to a login page. > > The /action/ of log

Re: Authorization/ Authentication

2010-12-27 Thread Dave Newton
27;re trying to figure out. Dave On Dec 27, 2010 7:18 AM, "Greg Akins" wrote: > I'm just starting to research the appropriate Struts2 way to do > Authorization/Authentication. > > Looks like a LoginInterceptor on the default stack is the way to go > (though I found

Re: Authorization/ Authentication

2010-12-27 Thread Jordi Fernandez
Have you considered Spring Security? http://static.springsource.org/spring-security/site/ On 27/12/2010 14:17, Greg Akins wrote: I'm just starting to research the appropriate Struts2 way to do Authorization/Authentication. Looks like a LoginInterceptor on the default stack is the way

Authorization/ Authentication

2010-12-27 Thread Greg Akins
I'm just starting to research the appropriate Struts2 way to do Authorization/Authentication. Looks like a LoginInterceptor on the default stack is the way to go (though I found a post at javaranch, by Dave Newton - http://www.coderanch.com/t/438760/Struts/Struts-Authentication-Authoriz

Re: URL authentication

2010-08-23 Thread Paweł Wielgus
.xml) for resource > authorization. Is this a good idea? Is it enough? > > -Oorspronkelijk bericht- > Van: CRANFORD, CHRIS [mailto:chris.cranf...@setech.com] > Verzonden: maandag 9 augustus 2010 15:50 > Aan: Struts Users Mailing List > Onderwerp: RE: URL authentication > >

RE: URL authentication

2010-08-09 Thread Guy Thomas
: URL authentication Pattern A: /unsecured/* Run whatever unsecured interceptors on these. This would not include the authentication interceptor or the allowed resource check interceptor. That's because these are considered OPEN to everyone. Pattern B: /secured/* Run the authentic

RE: URL authentication

2010-08-09 Thread CRANFORD, CHRIS
Pattern A: /unsecured/* Run whatever unsecured interceptors on these. This would not include the authentication interceptor or the allowed resource check interceptor. That's because these are considered OPEN to everyone. Pattern B: /secured/* Run the authentication check an

Re: URL authentication

2010-08-09 Thread Dave Newton
re mixing two issues here. Authentication deals with verifying > whether a user is what he/she claims to be and authorization is the > mechanism for checking whether someone has access to a particular > resource. > > The standard practice is to prevent unauthenticated users from accessin

Re: URL authentication

2010-08-09 Thread Rahul Mohan
I think we are mixing two issues here. Authentication deals with verifying whether a user is what he/she claims to be and authorization is the mechanism for checking whether someone has access to a particular resource. The standard practice is to prevent unauthenticated users from accessing

URL authentication

2010-08-08 Thread Guy Thomas
I am adding authentication to a Struts2 web application by implementing an authentication interceptor. With an interceptor, as far as I understand, you can prevent non-authenticated perons from accessing specific actions. However, suppose somebody forwards a URL to a specific pdf-file to a non

Re: Authentication and Empty Classes

2010-07-11 Thread JP Cafaro
I'm trying to get away from using a struts.xml as much as possible. My struts.xml looks like this: type="redirect">/authenticate/login-page class="interceptors.AuthenticationInterceptor" />

Re: Authentication and Empty Classes

2010-07-11 Thread Brian Thompson
In my project, I have everything defined as an action in a struts.xml. All my action classes extend BaseAction. Then, for cases where everything I need really *is* in the jsp, I just have an action set up something like: no-action-jsp.jsp Doing it this way, *everything* will be an action (t

Re: Authentication and Empty Classes

2010-07-11 Thread JP Cafaro
I'm not sure I follow. There isn't an action here. Let's say I have a jsp page that I want to be secure, aka you have to be logged in to visit. For all of the secure pages that actually require some work to be done, this is ok, because the workflow is: 1) Click link to secure page, "/secure-

Re: Authentication and Empty Classes

2010-07-11 Thread Brian Thompson
Couldn't you just declare "BaseAction.java" as the action's class? Also; it sounds like you're using a custom security solution; I'd suggest using Spring Security instead. Custom security code is likely to suffer from many of the bugs that Spring Security ran into years ago. -Brian On Sun, Jul

Authentication and Empty Classes

2010-07-11 Thread JP Cafaro
One thing that I don't like (haven't figured out how to get around this) is the need for empty classes. If I have a secure page, like an image upload form, let's call it (image-upload-form.jsp), I don't want the user to be able to access it if he or she is not logged in. To accomplish this, I

Re: Websphere/Struts issue with form based authentication

2010-05-15 Thread Struts Two
the solution there when you use form-based authentication. --- On Fri, 5/14/10, Jesse Hill wrote: > From: Jesse Hill > Subject: Websphere/Struts issue with form based authentication > To: user@struts.apache.org > Received: Friday, May 14, 2010, 6:59 PM > Hello everyone, >

Websphere/Struts issue with form based authentication

2010-05-15 Thread Jesse Hill
Hello everyone, I have a struts2 app (2.0.14) running on Websphere (version 6.1.x and 7.x) and when I try to access a struts action that is protected by Websphere security constraints and form based authentication, I get the following messages in the log: [5/14/10 14:34:14:169 EDT] 0092

Re: [OT] Bypass basic authentication for included webpage

2009-11-03 Thread Ashish Kulkarni
Hi What i am trying to include is feed from a web camera which works on IP address in network, there is a built in server in this webcamera which does basic authentication. this wont allow anonymous access, can i use http client or some thing to fake login from jsp page On Tue, Nov 3, 2009 at 1

RE: [OT] Bypass basic authentication for included webpage

2009-11-03 Thread Kawczynski, David
gt; From: Ashish Kulkarni [mailto:ashish.kulkarn...@gmail.com] > Sent: Tuesday, November 03, 2009 11:32 AM > To: Struts Users Mailing List > Subject: [OT] Bypass basic authentication for included webpage > > Hello > I have to include a webpage into my existing web application

[OT] Bypass basic authentication for included webpage

2009-11-03 Thread Ashish Kulkarni
Hello I have to include a webpage into my existing web application, this webpage required basic authentication, so when i include this webpage into my application and run i get a basic authentication pop up window, is there a way i can pass user id, password in header or some thing so i dont get

RE: Struts2 with Authentication & Security

2009-08-21 Thread Martin Gainty
nterdite. Ce message sert à l'information seulement et n'aura pas n'importe quel effet légalement obligatoire. Étant donné que les email peuvent facilement être sujets à la manipulation, nous ne pouvons accepter aucune responsabilité pour le contenu fourni. > Subject: RE:

RE: Struts2 with Authentication & Security

2009-08-21 Thread Kofford, C Todd
dd Kofford tkoff...@ku.edu University of Kansas - IT -Original Message- From: Martin Gainty [mailto:mgai...@hotmail.com] Sent: Friday, August 21, 2009 10:07 AM To: Struts Users Mailing List Subject: RE: Struts2 with Authentication & Security i had a devil of a time coaxing mvn package t

RE: Struts2 with Authentication & Security

2009-08-21 Thread Martin Gainty
Ce message sert à l'information seulement et n'aura pas n'importe quel effet légalement obligatoire. Étant donné que les email peuvent facilement être sujets à la manipulation, nous ne pouvons accepter aucune responsabilité pour le contenu fourni. > Subject: RE: Struts2 w

RE: Struts2 with Authentication & Security

2009-08-21 Thread Kofford, C Todd
o:poulw...@gmail.com] Sent: Friday, August 21, 2009 7:10 AM To: Struts Users Mailing List Subject: Re: Struts2 with Authentication & Security Hi all, "a few years ago" means also that this solution still works. But from my point of view, inteceptor might be better if You are in a si

RE: Struts2 with Authentication & Security

2009-08-21 Thread Zied Bejaoui
ugust 2009 21:33 To: Struts Users Mailing List Subject: Re: Struts2 with Authentication & Security Personally, I used to prefer container managed security, like what Tomcat provides -> http://tomcat.apache.org/tomcat-6.0-doc/realm-howto.html But found that I didn't like being

Re: Struts2 with Authentication & Security

2009-08-21 Thread Paweł Wielgus
cher [mailto:w...@wantii.com] > Sent: Thursday, August 20, 2009 8:11 PM > To: Struts Users Mailing List > Subject: Re: Struts2 with Authentication & Security > > I used this same approach for an app I worked on a few years ago. > There is nothing wrong, in fact its simplicity is

RE: Struts2 with Authentication & Security

2009-08-20 Thread Lee Clemens
ect - I admit I haven't looked into Interceptors too deeply.) -Original Message- From: Wes Wannemacher [mailto:w...@wantii.com] Sent: Thursday, August 20, 2009 8:11 PM To: Struts Users Mailing List Subject: Re: Struts2 with Authentication & Security I used this same approach for

Re: Struts2 with Authentication & Security

2009-08-20 Thread Wes Wannemacher
ion which needs to be protected simply extends the above abstract > class and implements doAction(), just as you would normally override > execute(). Make execute() final in the abstract class... > > Add another abstract method to get a group authentication level (implemented > by

RE: Struts2 with Authentication & Security

2009-08-20 Thread Lee Clemens
be protected simply extends the above abstract class and implements doAction(), just as you would normally override execute(). Make execute() final in the abstract class... Add another abstract method to get a group authentication level (implemented by each action's class) and you have a f

Re: Struts2 with Authentication & Security

2009-08-20 Thread Wes Wannemacher
g with the introduction of the > Spring and Hibernate frameworks. > > The authentication and security model used in the Struts1 application > was very simple and one of the pitfalls resulted in lack of overall > flexibility and ease of managing user roles and permissions.  One of the

Struts2 with Authentication & Security

2009-08-20 Thread CRANFORD, CHRIS
I am currently preparing the steps to port a legacy Struts1 application to Struts2. The rewrite of the web application also includes a transition from Tiles to Sitemesh along with the introduction of the Spring and Hibernate frameworks. The authentication and security model used in the

request requires HTTP authentication

2009-04-24 Thread Bhaarat Sharma
All of a sudden I am getting this when clicking a link that was previously working on my site HTTP Status 401 - -- *type* Status report *message* ** *description* *This request requires HTTP authentication ().* link is in the navigation and is pretty simple. here

Re: [OT] Authorization and Authentication Question

2009-03-11 Thread Lukasz Lenart
2009/3/11 Ashish Kulkarni : > HiI was able to configure LDAP to do authentication, but how do i use > UserDetailsService, > is there any example of how to use this and implement it in my project to > get user and role from DB2 database I did that like th

Re: [OT] Authorization and Authentication Question

2009-03-11 Thread Wes Wannemacher
On Wed, Mar 11, 2009 at 3:23 PM, Ashish Kulkarni wrote: > HiI was able to configure LDAP to do authentication, but how do i use > UserDetailsService, > is there any example of how to use this and implement it in my project to > get user and role from DB2 database > > UserDe

Re: [OT] Authorization and Authentication Question

2009-03-11 Thread Ashish Kulkarni
HiI was able to configure LDAP to do authentication, but how do i use UserDetailsService, is there any example of how to use this and implement it in my project to get user and role from DB2 database On Wed, Mar 11, 2009 at 10:50 AM, Ashish Kulkarni < ashish.kulkarn...@gmail.com>

Re: [OT] Authorization and Authentication Question

2009-03-11 Thread Ashish Kulkarni
ing. > > -Original Message- > From: Ashish Kulkarni [mailto:ashish.kulkarn...@gmail.com] > Sent: Wednesday, March 11, 2009 9:53 AM > To: Struts Users Mailing List > Subject: Re: [OT] Authorization and Authentication Question > > HiThanks for the suggestion, this applicatio

RE: [OT] Authorization and Authentication Question

2009-03-11 Thread Security Management
zation and Authentication Question HiThanks for the suggestion, this application which i need to do this is developed using Struts 1.2.6, can i add Spring Security to this, just as a drop in, is there any how to documents to add spring support to struts web application Ashish On Tue, Mar 10, 2009 at 7:

Re: [OT] Authorization and Authentication Question

2009-03-11 Thread Wes Wannemacher
Spring Security is it's own filter, and my experience is that it is pretty easy to integrate with just about any type of web-app. As far as existing tutorials, I'd say to check google. -Wes On Wed, Mar 11, 2009 at 9:52 AM, Ashish Kulkarni wrote: > HiThanks for the suggestion, this application wh

Re: [OT] Authorization and Authentication Question

2009-03-11 Thread Ashish Kulkarni
: > I'd agree. Have your UserDetailsService implementation hit LDAP for > authentication, and pass GrantedAuthorities[] on to the returned object by > asking DB2 about that info if the user is authenticated. > jk > > On Tue, Mar 10, 2009 at 6:44 PM, Wes Wannemacher wrote: &g

Re: [OT] Authorization and Authentication Question

2009-03-10 Thread Jim Kiley
I'd agree. Have your UserDetailsService implementation hit LDAP for authentication, and pass GrantedAuthorities[] on to the returned object by asking DB2 about that info if the user is authenticated. jk On Tue, Mar 10, 2009 at 6:44 PM, Wes Wannemacher wrote: > On Tuesday 10 March 2009

Re: [OT] Authorization and Authentication Question

2009-03-10 Thread Wes Wannemacher
On Tuesday 10 March 2009 17:56:30 Ashish Kulkarni wrote: > HiIs it possible to Authenticate user using LDAP, but authorize using a DB2 > database, > I have situation where i need to authenticate and authorize some web pages. > > I want to authenticate users against LDAP, but have to maintain > auth

[OT] Authorization and Authentication Question

2009-03-10 Thread Ashish Kulkarni
HiIs it possible to Authenticate user using LDAP, but authorize using a DB2 database, I have situation where i need to authenticate and authorize some web pages. I want to authenticate users against LDAP, but have to maintain authorization list, roles etc in DB2 database Has anyone done anything

Apache User Authentication from Struts2

2009-02-02 Thread Robert Stenholt Mygind
Hi I have a website made in a script language, here I use Apache User Authentication for protecting some things, I works ok. but I want the user to login by a form instead. So I made a small struts project, with a page with a form, here I have username and password, I go into the db and make

  1   2   3   4   >