Return-Path: Delivered-To: apmail-jakarta-tomcat-user-archive@www.apache.org Received: (qmail 74158 invoked from network); 1 Apr 2004 15:31:40 -0000 Received: from daedalus.apache.org (HELO mail.apache.org) (208.185.179.12) by minotaur-2.apache.org with SMTP; 1 Apr 2004 15:31:40 -0000 Received: (qmail 4370 invoked by uid 500); 1 Apr 2004 15:30:52 -0000 Delivered-To: apmail-jakarta-tomcat-user-archive@jakarta.apache.org Received: (qmail 4325 invoked by uid 500); 1 Apr 2004 15:30:52 -0000 Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Subscribe: List-Help: List-Post: List-Id: "Tomcat Users List" Reply-To: "Tomcat Users List" Delivered-To: mailing list tomcat-user@jakarta.apache.org Received: (qmail 4149 invoked from network); 1 Apr 2004 15:30:51 -0000 Received: from unknown (HELO mta06-svc.ntlworld.com) (62.253.162.46) by daedalus.apache.org with SMTP; 1 Apr 2004 15:30:51 -0000 Received: from dell ([81.103.21.114]) by mta06-svc.ntlworld.com (InterMail vM.4.01.03.37 201-229-121-137-20020806) with ESMTP id <20040401150411.FAJI3128.mta06-svc.ntlworld.com@dell> for ; Thu, 1 Apr 2004 16:04:11 +0100 From: "Martin Alley" To: "'Tomcat Users List'" Subject: RE: How does Tomcat manage Form-based authentication? Date: Thu, 1 Apr 2004 16:03:59 +0100 Message-ID: <009901c417fa$92b75dd0$3100a8c0@martinjfalley.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.2616 In-Reply-To: X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Importance: Normal X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N It sends you the html form you specify in the section of web.xml See chapter 12 (Security) Appendix A (Deployment Descriptor) of Servlet Spec 2.3 for details. http://java.sun.com/products/servlet/download.html#specs Martin -----Original Message----- From: Malcolm Warren [mailto:malcolm@villeinitalia.com] Sent: 01 April 2004 15:39 To: Tomcat Users List Subject: How does Tomcat manage Form-based authentication? With BASIC authorization, which I used to use, the browser was sent an "Authorization" header. This doesn't happen with FORM-based authorization. I believe Tomcat deals with it all, but how? Anybody know? --------------------------------------------------------------------- To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org For additional commands, e-mail: tomcat-user-help@jakarta.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org For additional commands, e-mail: tomcat-user-help@jakarta.apache.org