Re: How to restrict number of active logins/sessions to one per user

2006-12-08 Thread Sebastian Hennebrueder
If your intention is Brute Force Attach use Apache Web server, you might try mod_evasive to protect your login forms If you want to keep track, if the user is allready using another session, you might save the information in the database and check for each login if there is an entry in the db and

Re: How to restrict number of active logins/sessions to one per user

2006-12-08 Thread Mikolaj Rydzewski
Edmon Begoli wrote: Can someone please suggest an effective way to restrict number of sessions/logins allowed per user. Java Web Parts and a filter similiar to http://javawebparts.sourceforge.net/javadocs/javawebparts/filter/SessionLimiterFilter.html -- Mikolaj Rydzewski <[EMAIL PROTECTED]>

How to restrict number of active logins/sessions to one per user

2006-12-08 Thread Edmon Begoli
Hi, Can someone please suggest an effective way to restrict number of sessions/logins allowed per user. This is a security requirement imposed by the client I currently deal witt. I would like for some Tomcat specialists to suggest some intelligent solution for this. Thanks in advance! Thank