> LDAP authentication with a bind is supported in the JNDIRealm included with 
> Tomcat 4.1

John, thanks for the info. 
I tested tomcat 4.1.12 and noticed that HttpServletRequest.getUserPrincipal() 
returns a not-null object even if there has been absolutely no auth (new 
browser instance, no cookies, ...).
If I extend the auth-test in BasicAuthenticator.authenticate it works:
---
if (principal != null && !principal.getName().equals("")) {
---

-- 
Dipl. Inf. Carsten Burghardt
Login & Solutions AG
email: [EMAIL PROTECTED]
Tel: 0821/2488-311     Fax: 0821/2488-180


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to