I am using JBoss. The servlet Form authentication is nice, but I need something more flexible. Users are allowed to login on any unprotected page and stay in the same page after lgoin. I have database table to store username and password. After verifying username and password, what information needs to put into session(or other data structure) so that: HttpServletRequest.getRemoteUser() will return the remote user. Thanks!
--------------------------------- Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US (and 30+ countries) for 2ยข/min or less.