Re: Using multiple login pages

2011-10-06 Thread Pid
On 05/10/2011 18:51, Martin O'Shea wrote: > > /jsp/index/newjsp.jsp > This is incorrect, it should contain a list of welcome-file elements which indicated which files can be used as index files, when found in a directory. It shouldn't give a full path to a specific file: ind

RE: Using multiple login pages

2011-10-06 Thread Martin O'Shea
Ok. I think, I think I have it now to my satisfaction although much work remains. Thanks Chris and Charles. -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: 06 Oct 2011 01 45 To: Tomcat Users List Subject: Re: Using multiple login pages

Re: Using multiple login pages

2011-10-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Martin, On 10/5/2011 6:50 PM, Martin O'Shea wrote: > If I understand you correctly, I think I should have this: > > FORM > Form-Based Authentication Area > /login > /jsp/security/protected/error.jsp > > > > > But when called I receive a page

RE: Using multiple login pages

2011-10-05 Thread Martin O'Shea
Using multiple login pages > From: Caldarale, Charles R > Subject: RE: Using multiple login pages > If you're already using a .jsp for the login, you have all the dynamic > content capability you need. If instead you want the login to be > handled by a servlet, just m

RE: Using multiple login pages

2011-10-05 Thread Caldarale, Charles R
> From: Caldarale, Charles R > Subject: RE: Using multiple login pages > If you're already using a .jsp for the login, you have all the dynamic > content capability you need. If instead you want the login to be handled > by a servlet, just make the setting target a previ

RE: Using multiple login pages

2011-10-05 Thread Caldarale, Charles R
> From: Martin O'Shea [mailto:app...@dsl.pipex.com] > Subject: RE: Using multiple login pages > Do you mean the login page as specified in web.xml's > as below: If you're already using a .jsp for the login, you have all the dynamic content capability you need. If

RE: Using multiple login pages

2011-10-05 Thread Martin O'Shea
n for logging in? -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: 05 Oct 2011 23 20 To: Tomcat Users List Subject: RE: Using multiple login pages > From: Martin O'Shea [mailto:app...@dsl.pipex.com] > Subject: RE: Using multiple login pag

RE: Using multiple login pages

2011-10-05 Thread Caldarale, Charles R
> From: Martin O'Shea [mailto:app...@dsl.pipex.com] > Subject: RE: Using multiple login pages > I wouldn't mind seeing a servlet specified as if you know > of an example. Simply set the of some to that of the login page. - Chuck THIS COMMUNICATION MAY CONTA

RE: Using multiple login pages

2011-10-05 Thread Martin O'Shea
That's a shame. It looked promising. I wouldn't mind seeing a servlet specified as if you know of an example. -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: 05 Oct 2011 23 13 To: Tomcat Users List Subject: Re: Using multiple l

Re: Using multiple login pages

2011-10-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Martin, On 10/5/2011 6:06 PM, Martin O'Shea wrote: > Thanks for this Chris. It is food for thought. > > I was under the impression that was static, > because that's how I seen it used in apps I've worked on. > > But I am curious to try a filter as

RE: Using multiple login pages

2011-10-05 Thread Martin O'Shea
08 To: Tomcat Users List Subject: Re: Using multiple login pages -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Martin, On 10/5/2011 1:59 PM, Martin O'Shea wrote: > I have it now. There was a redirection going on in a method called > from a scriptlet in the login page. It now seems to be OK

Re: Using multiple login pages

2011-10-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Martin, On 10/5/2011 1:59 PM, Martin O'Shea wrote: > I have it now. There was a redirection going on in a method called > from a scriptlet in the login page. It now seems to be OK. Glad you got it going. > But one thing bugs me still: you said that

RE: Using multiple login pages

2011-10-05 Thread Martin O'Shea
an you give any pointers about this? .-Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: 05 Oct 2011 18 39 To: Tomcat Users List Subject: Re: Using multiple login pages -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Martin, On 10/5/2011 11:41 AM

RE: Using multiple login pages

2011-10-05 Thread Martin O'Shea
herschultz.net] Sent: 05 Oct 2011 18 39 To: Tomcat Users List Subject: Re: Using multiple login pages -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Martin, On 10/5/2011 11:41 AM, Martin O'Shea wrote: > This follows on from yesterday's discussion about whether in my > applicati

Re: Using multiple login pages

2011-10-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Martin, On 10/5/2011 11:41 AM, Martin O'Shea wrote: > This follows on from yesterday's discussion about whether in my > application, I can have more than one page with an embedded login > form or not. > > I've been looking over the servlet spec (V2.2

RE: Using multiple login pages

2011-10-05 Thread Martin O'Shea
I then invoke a link from the welcome file, I get the login page. Surely it should be the other way around? -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: 04 Oct 2011 19 56 To: Tomcat Users List Subject: Re: Using multiple login pages app...@dsl.pipex.com wrote: &g

Re: Using multiple login pages

2011-10-04 Thread André Warnier
app...@dsl.pipex.com wrote: Not sure about which version of security I will use but I would like to accommodate MD5 verification into things. There's no sensitive or confidential info in the system either so protected page access may not be required. I don't know what you have in mind, but th

Re: Using multiple login pages

2011-10-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Martin, On 10/4/2011 2:06 PM, app...@dsl.pipex.com wrote: > Not sure about which version of security I will use but I would > like to accommodate MD5 verification into things. Note that MD5 doesn't verify anything. It's just a hashing function that c

Re: Using multiple login pages

2011-10-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 10/4/2011 2:01 PM, André Warnier wrote: > Christopher Schultz wrote: ... > > (I agree with what precedes this) >> >> So, you can sniff the original request URI and serve-up whatever >> flavor of login page you want. > > But with declarat

Re: Using multiple login pages

2011-10-04 Thread appy74
Not sure about which version of security I will use but I would like to accommodate MD5 verification into things. There's no sensitive or confidential info in the system either so protected page access may not be required. Thanks Andre and Chris. Quoting André Warnier : > Christopher Schul

Re: Using multiple login pages

2011-10-04 Thread André Warnier
Christopher Schultz wrote: ... (I agree with what precedes this) So, you can sniff the original request URI and serve-up whatever flavor of login page you want. But with declarative security, that's kind of hard to do, no ? Can't do that with a Servlet Filter. -

Re: Using multiple login pages

2011-10-04 Thread appy74
Thanks Chris. I'll be reading the spec soon enough. Quoting Christopher Schultz : > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Martin, > > On 10/4/2011 1:12 PM, app...@dsl.pipex.com wrote: > > Before I look at the specification > > :( > > You should read the spec all the way through

Re: Using multiple login pages

2011-10-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Martin, On 10/4/2011 1:12 PM, app...@dsl.pipex.com wrote: > Before I look at the specification :( You should read the spec all the way through IMO. It's not that long, it's well-written and readable by real humans (and not techno-lawyers), and very

RE: Using multiple login pages

2011-10-04 Thread appy74
each of which calls the same login authentication, but Quoting "Caldarale, Charles R" : > > From: app...@dsl.pipex.com [mailto:app...@dsl.pipex.com] > > Subject: Using multiple login pages > > > is it possible with Tomcat 6.0.26 for multiple login pages >

RE: Using multiple login pages

2011-10-04 Thread Caldarale, Charles R
> From: app...@dsl.pipex.com [mailto:app...@dsl.pipex.com] > Subject: Using multiple login pages > is it possible with Tomcat 6.0.26 for multiple login pages > to be specified? Read the servlet spec, especially section 13.2. A webapp may have only one element, so there cannot

Using multiple login pages

2011-10-04 Thread appy74
Hello I have a realm defined as follows in my application's web.xml file: FORM Form-Based Authentication Area /jsp/security/protected/login.jsp /jsp/security/protected/error.jsp Which means that all users must log in from the page