tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andoni" <>
Subject Re: Authentication with JAAS / Form Autenthication/ "j_security_check"
Date Fri, 28 Nov 2003 10:23:44 GMT
You don't have to instruct the user to do this.  Just have login form as a
hidden form and fill (and submit) it using JavaScript.  You can get the
values from a login form you call whatever you like and then append whatever
you like to the end of each of the username and password.

This does sound rather odd though and you should really be looking at the
bigger picture of your architecture to see why you have this problem in the
first place as it sounds like you are trying to hack a solution to me!!
Sorry if your not!


----- Original Message -----
From: "Adam Hardy" <>
To: "Tomcat Users List" <>
Sent: Thursday, November 27, 2003 10:08 PM
Subject: Re: Authentication with JAAS / Form Autenthication/

> On 11/27/2003 06:41 PM Jose Antonio Chirinos wrote:
> > Hi, i have a web application that use web authentication through
> > "j_security_check" servlet; i need to add an extra parameter diferent
> > of "j_password" and "j_username"; i guess that i have to put the
> > extra parameter in the login form and in the definition of the realm;
> > but where i have to include the code for the comparation of the new
> > parameter.Thanks in Advanced.Jose Antonio Chirinos.
> Jose,
> tomcat (and all servlet spec compliant app servers) won't process any
> further parameters other than the two you mention. When you code your
> realm, you code a LoginModule or equivalent which is passed these 2
> parameters.
> This means the only option you have is to instruct the user to place the
> extra parameter on the end of the username, perhaps after an appropriate
> seperator character, so that you can then split your extra parameter
> from the user name in your realm code.
> Adam
> --
> struts 1.1 + tomcat 5.0.14 + java 1.4.2
> Linux 2.4.20 RH9
> ---------------------------------------------------------------------
> To unsubscribe, e-mail:
> For additional commands, e-mail:

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message