Return-Path: 
 <user-return-7036-apmail-geronimo-user-archive=geronimo.apache.org@geronimo.apache.org>
Delivered-To: apmail-geronimo-user-archive@www.apache.org
Received: (qmail 64609 invoked from network); 18 Jul 2007 16:31:38 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 18 Jul 2007 16:31:38 -0000
Received: (qmail 58333 invoked by uid 500); 18 Jul 2007 16:31:24 -0000
Delivered-To: apmail-geronimo-user-archive@geronimo.apache.org
Received: (qmail 58305 invoked by uid 500); 18 Jul 2007 16:31:24 -0000
Mailing-List: contact user-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
list-help: <mailto:user-help@geronimo.apache.org>
list-unsubscribe: <mailto:user-unsubscribe@geronimo.apache.org>
List-Post: <mailto:user@geronimo.apache.org>
Reply-To: user@geronimo.apache.org
List-Id: <user.geronimo.apache.org>
Delivered-To: mailing list user@geronimo.apache.org
Received: (qmail 58294 invoked by uid 99); 18 Jul 2007 16:31:24 -0000
Received: from herse.apache.org (HELO herse.apache.org) (140.211.11.133)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 18 Jul 2007 09:31:24 -0700
X-ASF-Spam-Status: No, hits=0.0 required=10.0
	tests=
X-Spam-Check-By: apache.org
Received-SPF: pass (herse.apache.org: local policy)
Received: from [69.147.95.85] (HELO smtp122.plus.mail.sp1.yahoo.com)
 (69.147.95.85)
    by apache.org (qpsmtpd/0.29) with SMTP; Wed, 18 Jul 2007 09:31:20 -0700
Received: (qmail 14981 invoked from network); 18 Jul 2007 16:30:59 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  h=Received:X-YMail-OSG:Mime-Version:In-Reply-To:References:Content-Type:Message-Id:Content-Transfer-Encoding:From:Subject:Date:To:X-Mailer;
  b=tQyyy9lOQmljBWfyAlmtUeRmvjoMu7NFyJozYuOrM1Sc2z31zWPQh2XVxzlQWPBN505VuD01hDh2P3dibzIiR98C67CrYuMFDuji88lz7sc/exi5G3zPSzfoqKeaOMWK2FFwv6sEICwwAcFBbp2mwCcID1OXGogpz9zn0iDNdp0=
  ;
Received: from unknown (HELO ?67.102.173.8?) (david_jencks@67.102.173.8 with
 plain)
  by smtp122.plus.mail.sp1.yahoo.com with SMTP; 18 Jul 2007 16:30:59 -0000
X-YMail-OSG: 
 vYJUx2AVM1mYzYor1r7Z7mwQFsfTTGZ1ildTzc2dER74ui1rV_re8z30abw8B7O_ZFGEUyJYuTeQknj98XxH1pySjx0KtkfVzW4QKoQEACzjHqlHKw--
Mime-Version: 1.0 (Apple Message framework v752.3)
In-Reply-To: <11671705.post@talk.nabble.com>
References: <11671705.post@talk.nabble.com>
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <6A47946A-CAEC-4666-B97A-524E139691ED@yahoo.com>
Content-Transfer-Encoding: 7bit
From: David Jencks <david_jencks@yahoo.com>
Subject: Re: filter-mapping for j_security_check
Date: Wed, 18 Jul 2007 09:31:02 -0700
To: user@geronimo.apache.org
X-Mailer: Apple Mail (2.752.3)
X-Virus-Checked: Checked by ClamAV on apache.org

The filter approach isn't going to work AFAIK because the security  
constraints have to be evaluated/applied/etc before any user code  
such as filters are run.  In fact IIUC there is no j_security_check  
"servlet", that is handled directly by the web containers security  
system.

Is there some reason you can't put your validation logic in an  
(additional) login module?

thanks
david jencks

On Jul 18, 2007, at 9:05 AM, Bill Brown wrote:

>
> Greetings:
>
> I have an app with container managed security.  There is a login  
> form that
> uses j_username and j_password to post to j_security_check.  I  
> would like to
> perform some validation on the j_username and j_password to make  
> sure the
> data entered is valid before checking the credentials against the  
> db.  I
> tried using a filter with filter-mapping in web.xml, but the filter  
> isn't
> getting called.  Below is the filter mapping.  Does anyone know how  
> to do
> this in geronimo 2.0?  Is this possible?
>
> <filter>
> 	<filter-name>loginValidator</filter-name>
> 	<filter-class>
> 		com.abc..LoginValidateFilter
> 	</filter-class>
> </filter>
>
> <filter-mapping>
>         <filter-name>loginValidator</filter-name>
> 	<url-pattern>/j_security_check</url-pattern>
> 	<dispatcher>REQUEST</dispatcher>
> 	<dispatcher>FORWARD</dispatcher>
> </filter-mapping>
>
> I also tried the mapping without the <dispatcher> elements and it  
> didn't
> work either.   Thanks for any more information or clarification.
>
> Bill.
>
> -- 
> View this message in context: http://www.nabble.com/filter-mapping- 
> for-j_security_check-tf4104213s134.html#a11671705
> Sent from the Apache Geronimo - Users mailing list archive at  
> Nabble.com.
>