Re: Basic authentication without a secure connection

2009-05-04 Thread Joseph Millet
There's one thing you may do: implement an authentication web service on tomcat's side. Make a wsdl service running on it accepting request on whether given encrypted session id is a valid one, service does check either a running session use that id and simply replies OK or KO. But that means imple

Re: Basic authentication without a secure connection

2009-05-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tokajac, On 5/3/2009 2:06 PM, Tokajac wrote: > User should access the application directly (not proxying). > On > http://hc.apache.org/httpclient-3.x/tutorial.html > as I see header is created for programatic access and not via browser. > > Is it pos

Re: Basic authentication without a secure connection

2009-05-04 Thread André Warnier
Hi. So now we're making progress. Unfortunately, I don't think that there is a "simple" solution. I think that the easiest solution to implement in this case, would be : - remove the authentication filter you have at the Tomcat level. - put an Apache httpd front-end to /both/ your Struts applica

Re: Basic authentication without a secure connection

2009-05-04 Thread Tokajac
s-h...@tomcat.apache.org > > > -- View this message in context: http://www.nabble.com/Basic-authentication-without-a-secure-connection-tp23347310p23370984.html Sent from the Tomcat - User mailing list archive at Nabble.com. -

Re: Basic authentication without a secure connection

2009-05-03 Thread André Warnier
Mmmm wait.. I think I am starting to understand what you want. A question first : are the Tomcat server (+Struts) and the php application on the same host ? A second question : does your Tomcat host know the login user-id and password of the users ? In other words, can the host where Tomcat r

Re: Basic authentication without a secure connection

2009-05-03 Thread André Warnier
Tokajac wrote: I think my idea would be scenario 4.) I want to: 1.) Open a browser and write Tomcat application's address (localhost:8080/myapp); 2.) Write username and password in login fields of the application; 3.) Save credentials in session after successful login; 4.) Have link to comp

Re: Basic authentication without a secure connection

2009-05-03 Thread Tokajac
ly one > of the possibilities. > > So, which kind of scenario is yours ? > > > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > > > -- View this message in co

Re: Basic authentication without a secure connection

2009-05-03 Thread André Warnier
Imre, just repeating some of the things you've said previously : Tokajac wrote: I want to connect applications: one is running on Tomcat (Java/Struts) with another (php). I want to pass credentials after link is clicked, so I don't need to fill the username and password informations. I s

Re: Basic authentication without a secure connection

2009-05-03 Thread Andre-John Mas
The browser takes care of that, and you should not be trying to over- ride it. If you don't want to retype the username/password all the time, then you can tell teh browser to remember the password, or have the server in question not asking for the password, understanding the consequences - th

Re: Basic authentication without a secure connection

2009-05-03 Thread Tokajac
would be > okay with it, but I am not going to make any assumptions. > > André-John > ------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-m

Re: Basic authentication without a secure connection

2009-05-03 Thread Andre-John Mas
On 3-May-2009, at 08:11, Tokajac wrote: Now why would you want to do that ? I want to connect applications: one is running on Tomcat (Java/ Struts) with another (php). I have an application running on Tomcat that has a link to other application which is on another server. Application on

Re: Basic authentication without a secure connection

2009-05-03 Thread Tokajac
And if that is not what you want to do, what do you want to do ? > > > > - > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > &

Re: Basic authentication without a secure connection

2009-05-02 Thread André Warnier
Tokajac wrote: Hello! I'm developing a Tomcat, Struts application. I want to send credentials to the Authentication Dialog that's shown by application which is running on another server. With this idea, I'd connect 2 application: the Tomcat application should have a redirection link to the oth

Basic authentication without a secure connection

2009-05-02 Thread Tokajac
rg/rfc/rfc2616.txt How can I implement this? Regards P.S. I also started this topic on: http://www.coderanch.com/t/442467/Security/Basic-authentication-without-secure-connection -- View this message in context: http://www.nabble.com/Basic-authentication-without-a-secure-connection-tp2334731