Return-Path: 
 <jetspeed-dev-return-36720-apmail-portals-jetspeed-dev-archive=portals.apache.org@portals.apache.org>
Delivered-To: apmail-portals-jetspeed-dev-archive@www.apache.org
Received: (qmail 70469 invoked from network); 9 Sep 2010 16:09:04 -0000
Received: from unknown (HELO mail.apache.org) (140.211.11.3)
  by 140.211.11.9 with SMTP; 9 Sep 2010 16:09:04 -0000
Received: (qmail 58263 invoked by uid 500); 9 Sep 2010 16:09:04 -0000
Delivered-To: apmail-portals-jetspeed-dev-archive@portals.apache.org
Received: (qmail 58103 invoked by uid 500); 9 Sep 2010 16:09:03 -0000
Mailing-List: contact jetspeed-dev-help@portals.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:jetspeed-dev-help@portals.apache.org>
List-Unsubscribe: <mailto:jetspeed-dev-unsubscribe@portals.apache.org>
List-Post: <mailto:jetspeed-dev@portals.apache.org>
List-Id: <jetspeed-dev.portals.apache.org>
Reply-To: "Jetspeed Developers List" <jetspeed-dev@portals.apache.org>
Delivered-To: mailing list jetspeed-dev@portals.apache.org
Received: (qmail 58095 invoked by uid 99); 9 Sep 2010 16:09:03 -0000
Received: from Unknown (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 09 Sep 2010 16:09:03 +0000
X-ASF-Spam-Status: No, hits=0.0 required=10.0
	tests=FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (nike.apache.org: local policy)
Received: from [206.190.38.143] (HELO web51101.mail.re2.yahoo.com)
 (206.190.38.143)
    by apache.org (qpsmtpd/0.29) with SMTP; Thu, 09 Sep 2010 16:08:40 +0000
Received: (qmail 74818 invoked by uid 60001); 9 Sep 2010 16:08:19 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024;
 t=1284048499; bh=Ii+UeMiB14iL0PkAku1dmqLkXOOL9naVFCbU9Jxfot4=;
 h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
 b=J6RvR5hydG6NPqd+ccH5sFecbbLOvBYKPr2VqtBZLZM5Xv3A/w/0aUE/bZaCh0aw1cfXqwDwh5qG69QrZLq3hrcG4xWOugb5ruloBNzrt9AbQwL/FNi4WDpCzaa17Z8EGFV8ohWnSbKoyngJZZj8Yg4vEl1a+1448ePfcmRoJHc=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
  b=YoBeHFvkfJimI/9au83MrN2Z0XMX7JY1vSwDutpHFkUHNghJ6kgW2Zbu26kkE6L1VRSGDIRQFxSbq8M7SrGy3PViw45+7ueIdak0ZR0ffhC9rL4ySg6oknAQoUlysxLcil4HIu7r+8230g4H1p6lKmSyptK2bo9kPhMWiIc2tVw=;
Message-ID: <23537.73795.qm@web51101.mail.re2.yahoo.com>
X-YMail-OSG: gVKsE0cVM1nWQuMrGjvJYdpGY.8U_oJWIJZYnw.NCuYopO6
 Xc1uONkpIVlTWn5YDjj34sKrKYz1KtHqdur2H.sUxZMIhrtr5IhWsiavg4Ug
 VdrkPYpyW2q6og_osBLcAs1tKSiMJ0hVR1_dldtI1jB6Unm8svdOxLZvGrXm
 ZWiFxRf4wOZMF7XAqc5Gocxxt4kWmgALFdfLdiMN7Km9XTdbnnxcALckgkO_
 UaKfbXk0M1ttd1RFIozWwYfRlEIXvI5jWBmyU3HNqME2wS29fqhwejhjRAa2
 Jw7D4oph1Est8wH5ha6N0pPz0YbUsdYDCpZhNA.51nuqG53rHDwogWs8C3jA
 -
Received: from [99.30.81.146] by web51101.mail.re2.yahoo.com via HTTP;
 Thu, 09 Sep 2010 09:08:18 PDT
X-Mailer: YahooMailClassic/11.4.7 YahooMailWebService/0.8.105.279950
Date: Thu, 9 Sep 2010 09:08:18 -0700 (PDT)
From: Woonsan Ko <woon_san@yahoo.com>
Subject: Re: Secure a Portlet
To: Jetspeed Developers List <jetspeed-dev@portals.apache.org>
In-Reply-To: <29647374.post@talk.nabble.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Virus-Checked: Checked by ClamAV on apache.org

Hi Murali,

I haven't tried it yet, but the basic idea is to establish session via http and submit the login form to https later to share the same session between http/https requests.
In j2-admin, you can find the login page JSP page (e.g., /WEB-INF/security/login/login.jsp). There you can also find a html form tag like the following:

<form method="POST" action='<c:url context="${portalContextPathInUrlTag}" value="${destLogin}"/>'>

I think you can give a try by making the action attribute an absolute url with https.

Regards,

Woonsan

--- On Thu, 9/9/10, Murali.M <murali.m@excelacom.in> wrote:

> From: Murali.M <murali.m@excelacom.in>
> Subject: Secure a Portlet
> To: jetspeed-dev@portals.apache.org
> Date: Thursday, September 9, 2010, 9:37 AM
> 
> Hi all,
> I'm trying to make the Login Portlet in the j2-admin secure
> i.e. when I
> traverse to the page containing the Login Portlet I want to
> use https
> instead of http. Please help me achieving this.
> 
> 
> Thanks and Regards,
> Murali Meriga.
> -- 
> View this message in context: http://old.nabble.com/Secure-a-Portlet-tp29647374p29647374.html
> Sent from the Jetspeed - Dev mailing list archive at
> Nabble.com.
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
> For additional commands, e-mail: jetspeed-dev-help@portals.apache.org
> 
> 


      

---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org