Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (athena.apache.org: local policy)
Message-ID: <4921C5B7.9070100@ice-sa.com>
Date: Mon, 17 Nov 2008 20:27:51 +0100
From: =?ISO-8859-1?Q?Andr=E9_Warnier?= <aw@ice-sa.com>
User-Agent: Thunderbird 2.0.0.16 (Windows/20080708)
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: HttpServletRequest.getUserPrincipal
References: <49218B2E.3080206@ice-sa.com>
 <0AAE5AB84B013E45A7B61CB66943C17215A3942802@USEA-EXCH7.na.uis.unisys.com>
In-Reply-To: 
 <0AAE5AB84B013E45A7B61CB66943C17215A3942802@USEA-EXCH7.na.uis.unisys.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit

Caldarale, Charles R wrote:
>> From: Andr� Warnier [mailto:aw@ice-sa.com]
>> Subject: HttpServletRequest.getUserPrincipal
>>
>> To get the authenticated user-id from within a filter or a
>> servlet, one calls HttpServletRequest.getUserPrincipal.getName()
> 
> or HttpServletRequest.getRemoteUser()
> 
Are these *really* equivalent ?

The 1.5 specs for HttpServletRequest.getRemoteUser say :

Returns the login of the user making this request, if the user has been 
authenticated, or null if the user has not been authenticated. Whether 
the user name is sent with each subsequent request depends on the 
browser and type of authentication. Same as the value of the CGI 
variable REMOTE_USER.


It is the association with the CGI variable and with the browser sending 
or not a header that makes me have a doubt.  This CGI variable is 
usually set as per the HTTP Header "Authorization", which is only 
present in case of Basic or Digest authentication.
In the case of a Windows-based authentication, or a form-based 
authentication, this HTTP header would not be sent by the browser.

Another way to phrase my question would be : is getRemoteUser() merely a 
shortcut, under which happens a getUserPrincipal.getName(), or do those 
two use a different underlying source to provide a user name ?


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org