On 05/10/2011 18:51, Martin O'Shea wrote:
>
> /jsp/index/newjsp.jsp
>
This is incorrect, it should contain a list of welcome-file elements
which indicated which files can be used as index files, when found in a
directory.
It shouldn't give a full path to a specific file:
ind
Ok. I think, I think I have it now to my satisfaction although much work
remains.
Thanks Chris and Charles.
-Original Message-
From: Christopher Schultz [mailto:ch...@christopherschultz.net]
Sent: 06 Oct 2011 01 45
To: Tomcat Users List
Subject: Re: Using multiple login pages
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Martin,
On 10/5/2011 6:50 PM, Martin O'Shea wrote:
> If I understand you correctly, I think I should have this:
>
> FORM
> Form-Based Authentication Area
> /login
> /jsp/security/protected/error.jsp
>
>
>
>
> But when called I receive a page
Using multiple login pages
> From: Caldarale, Charles R
> Subject: RE: Using multiple login pages
> If you're already using a .jsp for the login, you have all the dynamic
> content capability you need. If instead you want the login to be
> handled by a servlet, just m
> From: Caldarale, Charles R
> Subject: RE: Using multiple login pages
> If you're already using a .jsp for the login, you have all the dynamic
> content capability you need. If instead you want the login to be handled
> by a servlet, just make the setting target a previ
> From: Martin O'Shea [mailto:app...@dsl.pipex.com]
> Subject: RE: Using multiple login pages
> Do you mean the login page as specified in web.xml's
> as below:
If you're already using a .jsp for the login, you have all the dynamic content
capability you need. If
n for logging in?
-Original Message-
From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com]
Sent: 05 Oct 2011 23 20
To: Tomcat Users List
Subject: RE: Using multiple login pages
> From: Martin O'Shea [mailto:app...@dsl.pipex.com]
> Subject: RE: Using multiple login pag
> From: Martin O'Shea [mailto:app...@dsl.pipex.com]
> Subject: RE: Using multiple login pages
> I wouldn't mind seeing a servlet specified as if you know
> of an example.
Simply set the of some to that of the login
page.
- Chuck
THIS COMMUNICATION MAY CONTA
That's a shame. It looked promising.
I wouldn't mind seeing a servlet specified as if you know of
an example.
-Original Message-
From: Christopher Schultz [mailto:ch...@christopherschultz.net]
Sent: 05 Oct 2011 23 13
To: Tomcat Users List
Subject: Re: Using multiple l
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Martin,
On 10/5/2011 6:06 PM, Martin O'Shea wrote:
> Thanks for this Chris. It is food for thought.
>
> I was under the impression that was static,
> because that's how I seen it used in apps I've worked on.
>
> But I am curious to try a filter as
08
To: Tomcat Users List
Subject: Re: Using multiple login pages
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Martin,
On 10/5/2011 1:59 PM, Martin O'Shea wrote:
> I have it now. There was a redirection going on in a method called
> from a scriptlet in the login page. It now seems to be OK
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Martin,
On 10/5/2011 1:59 PM, Martin O'Shea wrote:
> I have it now. There was a redirection going on in a method called
> from a scriptlet in the login page. It now seems to be OK.
Glad you got it going.
> But one thing bugs me still: you said that
an you give any
pointers about this?
.-Original Message-
From: Christopher Schultz [mailto:ch...@christopherschultz.net]
Sent: 05 Oct 2011 18 39
To: Tomcat Users List
Subject: Re: Using multiple login pages
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Martin,
On 10/5/2011 11:41 AM
herschultz.net]
Sent: 05 Oct 2011 18 39
To: Tomcat Users List
Subject: Re: Using multiple login pages
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Martin,
On 10/5/2011 11:41 AM, Martin O'Shea wrote:
> This follows on from yesterday's discussion about whether in my
> applicati
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Martin,
On 10/5/2011 11:41 AM, Martin O'Shea wrote:
> This follows on from yesterday's discussion about whether in my
> application, I can have more than one page with an embedded login
> form or not.
>
> I've been looking over the servlet spec (V2.2
I then invoke a link from the welcome file,
I get the login page. Surely it should be the other way around?
-Original Message-
From: André Warnier [mailto:a...@ice-sa.com]
Sent: 04 Oct 2011 19 56
To: Tomcat Users List
Subject: Re: Using multiple login pages
app...@dsl.pipex.com wrote:
&g
app...@dsl.pipex.com wrote:
Not sure about which version of security I will use but I would like to accommodate MD5
verification into things. There's no sensitive or confidential info in the system either so
protected page access may not be required.
I don't know what you have in mind, but th
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Martin,
On 10/4/2011 2:06 PM, app...@dsl.pipex.com wrote:
> Not sure about which version of security I will use but I would
> like to accommodate MD5 verification into things.
Note that MD5 doesn't verify anything. It's just a hashing function that
c
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
André,
On 10/4/2011 2:01 PM, André Warnier wrote:
> Christopher Schultz wrote: ...
>
> (I agree with what precedes this)
>>
>> So, you can sniff the original request URI and serve-up whatever
>> flavor of login page you want.
>
> But with declarat
Not sure about which version of security I will use but I would like to
accommodate MD5
verification into things. There's no sensitive or confidential info in the
system either so
protected page access may not be required.
Thanks Andre and Chris.
Quoting André Warnier :
> Christopher Schul
Christopher Schultz wrote:
...
(I agree with what precedes this)
So, you can sniff the original request URI and serve-up whatever
flavor of login page you want.
But with declarative security, that's kind of hard to do, no ?
Can't do that with a Servlet Filter.
-
Thanks Chris. I'll be reading the spec soon enough.
Quoting Christopher Schultz :
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Martin,
>
> On 10/4/2011 1:12 PM, app...@dsl.pipex.com wrote:
> > Before I look at the specification
>
> :(
>
> You should read the spec all the way through
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Martin,
On 10/4/2011 1:12 PM, app...@dsl.pipex.com wrote:
> Before I look at the specification
:(
You should read the spec all the way through IMO. It's not that long,
it's well-written and readable by real humans (and not
techno-lawyers), and very
each of which calls the same login
authentication, but
Quoting "Caldarale, Charles R" :
> > From: app...@dsl.pipex.com [mailto:app...@dsl.pipex.com]
> > Subject: Using multiple login pages
>
> > is it possible with Tomcat 6.0.26 for multiple login pages
>
> From: app...@dsl.pipex.com [mailto:app...@dsl.pipex.com]
> Subject: Using multiple login pages
> is it possible with Tomcat 6.0.26 for multiple login pages
> to be specified?
Read the servlet spec, especially section 13.2. A webapp may have only one
element, so there cannot
Hello
I have a realm defined as follows in my application's web.xml file:
FORM
Form-Based Authentication Area
/jsp/security/protected/login.jsp
/jsp/security/protected/error.jsp
Which means that all users must log in from the page
26 matches
Mail list logo