Mailing-List: contact httpclient-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "HttpClient User Discussion" <httpclient-user@jakarta.apache.org>
Received-SPF: pass (asf.osuosl.org: domain of ROLWEBER@de.ibm.com designates
 195.212.29.150 as permitted sender)
In-Reply-To: 
 <OFC54BE2DF.205FB2E1-ON85257096.0073333B-85257096.00750363@dtcc.com>
To: "HttpClient User Discussion" <httpclient-user@jakarta.apache.org>
MIME-Version: 1.0
Subject: Re: Setting Remote User Header
From: Roland Weber <ROLWEBER@de.ibm.com>
Message-ID: 
 <OFD2BF8651.FEF57042-ONC1257097.001EC281-C1257097.001F3E7C@de.ibm.com>
Date: Tue, 11 Oct 2005 07:41:18 +0200
Content-Type: text/plain; charset="US-ASCII"

Hello Michael,

> I have an application that uses the 
> javax.servlet.http.HttpServletRequest.getRemoteUser() method to pick up 
> what user was previously authenticated. 

The Servlet API is implemented by your servlet engine, and that
implementation decides what server-side authentication mechanism
is applied to determine the remote user. Setting one header or
another (except Authentication: of course) won't have any effect.
Or else your servlet engine's security is broken.

I suggest you search through the J2EE documentation about
authentication in general, then through your servlet engine's
documentation about user management and authentication. Once
your servlet or web application is properly protected from
unauthorized access, you check out our authentication guide

http://jakarta.apache.org/commons/httpclient/authentication.html

to learn how the HttpClient can authenticate against the server.

hope that helps,
  Roland

> I wrote the code below, but request.getRemoteUser() in my JSP still 
> returns null. Do I need to write a class that implements AuthScheme to 
do 
> this?
> 
>                 HttpClient client = new HttpClient();
>                 HttpMethod method = new GetMethod(url);
>                 method.setRequestHeader("REMOTE_USER", testUser);
>                 String responseBody = null;
>                 try{
>                         client.executeMethod(method);
>                         responseBody = method.getResponseBodyAsString();
>                 } catch (HttpException he) {
>                         System.err.println(
>                                 "Http error connecting to '" + url + 
"'");
>                         System.err.println(he.getMessage());
>                 } catch (IOException ioe) {
>                         System.err.println(
>                                 "Unable to connect to '" + url + "'");
>                 }
> 
> 
> Thanks in advance. 
> 
> Mike Schwartz

---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: httpclient-user-help@jakarta.apache.org