RE: a question about user athentication

2007-07-05 Thread is_maximum
Thank you all for replying I wanted to prevent the users who were deleted already to logging in. I resolve my problem by extending a class from JDBCRealm and override the getConnection() method (I'm not sure about the method name) and put my "select" statement with my favorite where clause "whe

RE: a question about user athentication

2007-07-05 Thread Propes, Barry L
to "prevent the other users to be signed on?" Do you mean prevent from locking them out? I've got a similar deal in my db with the users table, a column called user_dbflag, which, like your status column, uses a simple int value of -1 or 0 to see who's "active." Actually, it also has a timestam

RE: a question about user athentication

2007-07-02 Thread Caldarale, Charles R
> From: is_maximum [mailto:[EMAIL PROTECTED] > Subject: Re: a question about user athentication > > I mean is there any way to specialize this authentication > method for one application and for the others it remains > as its default Read the doc: http://tomcat.apache.org/tom

Re: a question about user athentication

2007-07-02 Thread is_maximum
Pid-2 wrote: > > Have a look at JDBCRealm (or DatasourceRealm) in the Tomcat Source. > You could alter the SQL statement for password or username so it fails > when '... status = 0'. > > Upload a jar with your new realm in it to server/lib and configure the > realm as a replacement for the o

Re: a question about user athentication

2007-07-02 Thread Pid
is_maximum wrote: Hi experts I am using Tomcat 5.5 and struts framework and security filter in order to authenticate users like the others I am using j_security_check action but my problem is that I have a field in my user table namely status which represent whether the user is available or de