Re: Auth-constraint with Tomcat 6

2009-06-24 Thread Mark Thomas
Christopher Schultz wrote: >> Would it also be possible to change the behavior of the >> combinedRealm/LockoutRealm such that if username is found in prior >> realm and password is incorrect, then it skips the other realms? It >> only look into the other realms if username is not found in prior >>

Re: Auth-constraint with Tomcat 6

2009-06-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Clement, On 6/24/2009 2:57 AM, Clement Chong wrote: > > > * > > > User is now authenticated via JDBCRealm followed by JNDIRealm and > would be able to access protected pages with any role. > > The question I have is how can I deny a g