From users-return-192170-apmail-tomcat-users-archive=tomcat.apache.org@tomcat.apache.org Mon Feb 23 20:03:57 2009 Return-Path: Delivered-To: apmail-tomcat-users-archive@www.apache.org Received: (qmail 80257 invoked from network); 23 Feb 2009 20:03:56 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 23 Feb 2009 20:03:56 -0000 Received: (qmail 6980 invoked by uid 500); 23 Feb 2009 20:03:46 -0000 Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org Received: (qmail 6285 invoked by uid 500); 23 Feb 2009 20:03:44 -0000 Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Tomcat Users List" Delivered-To: mailing list users@tomcat.apache.org Received: (qmail 6272 invoked by uid 99); 23 Feb 2009 20:03:44 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 23 Feb 2009 12:03:44 -0800 X-ASF-Spam-Status: No, hits=1.5 required=10.0 tests=LOCALPART_IN_SUBJECT,RCVD_IN_DNSWL_MED,SPF_HELO_SOFTFAIL,SPF_PASS,WEIRD_PORT X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of barry.l.propes@citi.com designates 192.193.221.104 as permitted sender) Received: from [192.193.221.104] (HELO mail.citigroup.com) (192.193.221.104) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 23 Feb 2009 20:03:31 +0000 Received: from imbarc-nj02.nj.ssmb.com (imbarc-nj02.nj.ssmb.com [150.110.177.216]) by imbaspam-ss02.namdmz.dmzroot.net (8.13.8/8.13.8/SSMB_EXT/ev: 22534 $) with ESMTP id n1NK39Ct016026 for ; Mon, 23 Feb 2009 20:03:10 GMT Received: from mailhub-nj04-1.nj.ssmb.com (mailhub-nj04-2.nj.ssmb.com [150.110.236.237]) by imbarc-nj02.nj.ssmb.com (8.13.8/8.13.8/SSMB_QQQ_IN/1.1) with ESMTP id n1NK2wnG026171 for ; Mon, 23 Feb 2009 20:02:58 GMT Received: from exnjiht04.nam.nsroot.net (EXNJIHT04.nam.nsroot.net [150.110.165.230]) by mailhub-nj04-1.nj.ssmb.com (8.13.8/8.13.8/CG_HUB) with ESMTP id n1NK2woW018691 for ; Mon, 23 Feb 2009 20:02:58 GMT Received: from exgtht06.nam.nsroot.net (169.171.98.135) by exnjiht04.nam.nsroot.net (150.110.165.230) with Microsoft SMTP Server (TLS) id 8.1.311.2; Mon, 23 Feb 2009 15:02:57 -0500 Received: from exgtmb06.nam.nsroot.net ([169.171.98.118]) by exgtht06.nam.nsroot.net ([169.171.98.135]) with mapi; Mon, 23 Feb 2009 14:02:57 -0600 From: "Propes, Barry L " To: "'Tomcat Users List'" Date: Mon, 23 Feb 2009 14:02:57 -0600 Subject: RE: Authenticating Users Thread-Topic: Authenticating Users Thread-Index: AcmVMkZWINIwuw7mQU2iRMXm/f8gsgAv0KaA Message-ID: <08382548D50D3049BD5599E1E3146B340D047928A3@exgtmb06.nam.nsroot.net> References: <49A06A0A.503@compulsivecreative.com> <49A06CD8.5080701@apache.org> <49A1678F.8010700@christopherschultz.net> <49A16E50.30907@compulsivecreative.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Scanned-By: MIMEDefang 2.52 on 169.175.16.181 X-Virus-Checked: Checked by ClamAV on apache.org This is what I did for our JDBC realm....forced uppercase with javascript o= n the alphan-numeric user id. Then the password was whatever they made it, even though it was case sensit= ive. Trying to figure out what the good of making passwords case-insensitive wou= ld be. Purpose-defeating at best it seems.=20 -----Original Message----- From: Gregor Schneider [mailto:rc46fi@googlemail.com]=20 Sent: Sunday, February 22, 2009 3:12 PM To: Tomcat Users List Subject: Re: Authenticating Users To the OP: 1. May I ask what database it is you're using? 2- I'd go for the following solution: Create a JSP-page accepting the credentials. The username should be convert= ed to uppercase. The password should be left as is so that case-sensivity h= ere is maintained. Don't know if I'm missing something, but to me that looks like a walk in th= e park. Rgds Gregor -- just because your paranoid, doesn't mean they're not after you... gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2 gpgp-key available @ http://pgpkeys.pca.dfn.de:11371 --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org For additional commands, e-mail: users-help@tomcat.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org For additional commands, e-mail: users-help@tomcat.apache.org