tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Adam Hardy <ahardy.str...@cyberspaceroad.com>
Subject Re: tomcat 4 vs 5 form based container auth & filters
Date Mon, 12 Apr 2004 12:48:22 GMT
I can see Yoav is blitzing the mailing list right now. Perhaps you'll 
get a more authoritative answer from him or the other hardcore tomcat 
people.

One of the problems of excluding filters from the authentication request 
is to do with character-encoding in the request - I remember someone 
whose realm included users with user-names containing accented 
characters that had to be converted to the correct character-encoding 
for the realm database. He had used a filter to do it but obviously had 
to find another way.

Adam

On 04/12/2004 02:34 PM Martin Alley wrote:
> Except with form based auth, you want the look at feel to be part of the
> application?  
> 
> What reasons did you hear? :-)
> 
> Whilst not knowing the full reasons, it would be nice if there was some
> config switch to control this, other wise it increases application
> maintainence overhead if you want to change the look and feel.
> 
> I'll see if I can find anything in the tc5 release notes on this.
> 
> Thanks again
> Martin
> 
> 
> -----Original Message-----
> From: Adam Hardy [mailto:ahardy.struts@cyberspaceroad.com] 
> Sent: 12 April 2004 13:13
> To: Tomcat Users List
> Subject: Re: tomcat 4 vs 5 form based container auth & filters
> 
> AFAIK it has something to do with providing a clean seperation between 
> the authentication (tomcat) and the application (your filter).
> 
> I think there were probably several reasons though for it, which 
> outweighed the reasons against, and I have heard a few of them.
> 
> 
> Adam
> 
> On 04/12/2004 01:50 PM Martin Alley wrote:
> 
>>Hi Adam,
>>
>>Why do you think this behaviour changed from tomcat4 ?
>>
>>I haven't gone into the full architecture of sitemesh, as yet, but I
>>know it includes a filter.
>>
>>Martin
>>
>>-----Original Message-----
>>From: Adam Hardy [mailto:ahardy.struts@cyberspaceroad.com] 
>>Sent: 12 April 2004 11:26
>>To: Tomcat Users List
>>Subject: Re: tomcat 4 vs 5 form based container auth & filters
>>
>>Yes your observations are correct. It's my understanding that filters 
>>are not invoked until after authentication. i.e. after the form-based 
>>login.
>>
>>I have no experience of site-mesh, but it seems a bit weird anyway to 
>>put decorations on a page via a filter - surely you should be 
>>encapsulating that sort of stuff in a JSP or taglib?
>>
>>Adam
>>
>>On 04/12/2004 11:02 AM Martin Alley wrote:
>>
>>
>>>Can anyone comment on this?
>>>
>>>Thanks
>>>Martin
>>>
>>>-----Original Message-----
>>>From: Martin Alley [mailto:martin.alley@ntlworld.com] 
>>>Sent: 09 April 2004 09:53
>>>To: Tomcat Users List
>>>Subject: tomcat 4 vs 5 form based container auth & filters
>>>
>>>Hi,
>>>
>>>Initial observation indicates that filters get executed when a form
>>
>>for
>>
>>
>>>form based container auth is served - under tomcat 4, but not under
>>>tomcat 5. 
>>>
>>>I'm using sitemesh.  The decorations go on the form based login page
>>>under tomcat 4, but not under tomcat 5. 
>>>
>>>I need to do more research, but can any one add to this?
>>>
>>>Thanks
>>>Martin
>>>
>>>
>>>
>>>
>>>
>>>---------------------------------------------------------------------
>>>To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
>>>For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>>>
>>>
>>>
>>>---------------------------------------------------------------------
>>>To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
>>>For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>>>
>>>
>>
>>
>>
> 
> 


-- 
struts 1.2 + tomcat 5.0.19 + java 1.4.2
Linux 2.4.20 Debian


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Mime
View raw message