Re: Webdav servlet authentication, authorization

2007-11-14 Thread Gabor Szokoli
On Nov 14, 2007 6:17 PM, Christopher Schultz <[EMAIL PROTECTED]> wrote: > Might I suggest taking a look at securityfilter > (http://securityfilter.sourceforge.net). Looks like a good fit, thank you for the suggestion! Gabor Szokoli ---

Re: Webdav servlet authentication, authorization

2007-11-14 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gabor, Gabor Szokoli wrote: > On Nov 13, 2007 10:11 PM, Mark Thomas <[EMAIL PROTECTED]> wrote: >> Gabor Szokoli wrote: >>> My vague idea is to use a servlet filter to do the authentication, >>> which could doctor the request URL path or parameters to

Re: Webdav servlet authentication, authorization

2007-11-13 Thread Gabor Szokoli
On Nov 13, 2007 10:11 PM, Mark Thomas <[EMAIL PROTECTED]> wrote: > Gabor Szokoli wrote: > > My vague idea is to use a servlet filter to do the authentication, > > which could doctor the request URL path or parameters to include the > > authorization details. > > That sounds plausible. Thank you, w

Re: Webdav servlet authentication, authorization

2007-11-13 Thread Mark Thomas
Gabor Szokoli wrote: > Is this the place to ask questions about that? Yes > If so: > > Is the Tomcat webdav servlet the successor of the abandoned-looking > sourceforge project of the same name? Sorry, no idea. > My problem is that I need to retrieve further authorization details > about the au

Webdav servlet authentication, authorization

2007-11-13 Thread Gabor Szokoli
Hi, We are evaluationg the tomcat webdav servlet for serving up a custom fileset based on the identity of the user and other search criteria encoded in the URL. Is this the place to ask questions about that? If so: Is the Tomcat webdav servlet the successor of the abandoned-looking sourceforge

Re: web service authentication authorization set up

2006-10-27 Thread Mark Thomas
Bertrand Baesjou wrote: > However for the authorization part we want to use different roles a > client can have (3 roles in our case). For this part we also want to use > certificates (preferably the same as in the authorization ones, but not > sure if that is possible or even good-practice). Tomc

web service authentication authorization set up

2006-10-27 Thread Bertrand Baesjou
Hi, I must say that I am quite new to the whole web services (WS) paradigm, but already have to deal with some serious matters which seem to grow a bit over my head. So I am hoping you can help me by providing some answers or links to relevant sites or documents (I am not to lazy to read myse

Authentication & Authorization

2006-01-25 Thread Luis Gervaso
Hello all, I am developing a login module for a webapp, Until now for me was sufficient with default tomcat login form j_security_check + j_username + j_password but now I need one more item in the authentication challenge this is the countryId because a user can belong many countries :) so now

Re: Using Authentication/Authorization

2005-11-17 Thread Jeremy Crosbie
I followed what Slide did when writing my module: http://cvs.apache.org/viewcvs.cgi/jakarta-slide/src/jaas/org/apache/slide/ja as/spi/SlideLoginModule.java?rev=1.2&view=markup On 11/17/05 3:29 AM, "Markus Plail" <[EMAIL PROTECTED]> wrote: > Hi Jeremy! > > Jeremy Crosbie <[EMAIL PROTECTED]> wri

Re: Using Authentication/Authorization

2005-11-17 Thread Markus Plail
Hi Jeremy! Jeremy Crosbie <[EMAIL PROTECTED]> writes: > Can you supply the relevant sections of your web.xml? I am using > FORM-based authentication--tested with both the Memory and JAAS > realms--but maybe this will give you some hints: Do you successfully use JAAS realm based authentication in

Re: Using Authentication/Authorization

2005-11-15 Thread Jeremy Crosbie
Can you supply the relevant sections of your web.xml? I am using FORM-based authentication--tested with both the Memory and JAAS realms--but maybe this will give you some hints: ... home page /index.jsp GET POST myrole FORM /login.jsp /loginError.jsp

Using Authentication/Authorization

2005-11-15 Thread Jess
Hiya, I am using Tomcat and Apache to host a simple website. I need to have some security on the site. At least to start with. Eventually I need to have security, period. :) So, following the documentation and several walk-thrus from many sources, I cannot get tomcat to cooperate. I