Hi, Thanks to all you Tomcat participants for such a supportive community.
I've questions for tomcat source code lovers. During forms authentication, does the FormAuthenticator store a Principal in the Session via setNote()? If so, does the notes map serve as a "dude, totally private" Map to hold relevant objects that are separate from session attributes? Just seeking enlightenment. Cheers, Yong PS. Sure wish the StandardSessionFacade exposed the setUserPrincipal method... with the intent of programmatic logging-in of the user when using FORM-auth. --------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]