struts-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Craig R. McClanahan" <craig...@apache.org>
Subject RE: JSP's under WEB-INF... or not
Date Mon, 02 Dec 2002 02:25:32 GMT


On Mon, 2 Dec 2002, Wendy Cameron wrote:

> Date: Mon, 2 Dec 2002 11:24:41 +1000
> From: Wendy Cameron <cameronw@usq.edu.au>
> Reply-To: Struts Users Mailing List <struts-user@jakarta.apache.org>
> To: Struts Users Mailing List <struts-user@jakarta.apache.org>
> Subject: RE: JSP's under WEB-INF... or not
>
> Yup this makes sense.  I think thats right
>
> But now I have small problem authentication was so simple ie user table has
> a field indicating which level of acces, so I used a simple authentication filter.
>
> So now I dont know what I should put in the <login-config> element?
>
> Any ideas or should I just write a filter form JSP's
>

If you're going to use container managed security (i.e. the
<security-constraint> element), you *must* also use container managed
login (specify BASIC, DIGEST, FORM, or CLIENT-CERT inside an <auth-method>
element in <login-config>).  It's a package deal.

> Regards Wendy

Craig

>
> > -----Original Message-----
> > From: Craig R. McClanahan [mailto:craigmcc@apache.org]
> > Sent: Monday, December 02, 2002 11:21 AM
> > To: Struts Users Mailing List
> > Subject: RE: JSP's under WEB-INF... or not
> >
> >
> >
> >
> > On Fri, 29 Nov 2002, Wendy Cameron wrote:
> >
> > > Date: Fri, 29 Nov 2002 09:22:20 +1000
> > > From: Wendy Cameron <cameronw@usq.edu.au>
> > > Reply-To: Struts Users Mailing List <struts-user@jakarta.apache.org>
> > > To: Struts Users Mailing List <struts-user@jakarta.apache.org>
> > > Subject: RE: JSP's under WEB-INF... or not
> > >
> > > I have been trying out this concept of using a nobody role
> > to close access to jsp and when I put a jsp page in I get the
> > following error.  Which wasnt quite what I had expected I had
> > expected an access denied type error.  Is this how it should behave?
> > > Or is there something wrong with what I have set up.?
> > >
> >
> > Looks like you might be missing a <login-config> element that
> > tells the
> > container how user login is supported.
> >
> > Craig
> >
> >
> > --
> > To unsubscribe, e-mail:
> > <mailto:struts-user-unsubscribe@jakarta.apache.org>
> > For additional commands, e-mail:
> > <mailto:struts-user-help@jakarta.apache.org>
> >
> >
>
> --
> To unsubscribe, e-mail:   <mailto:struts-user-unsubscribe@jakarta.apache.org>
> For additional commands, e-mail: <mailto:struts-user-help@jakarta.apache.org>
>
>


--
To unsubscribe, e-mail:   <mailto:struts-user-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:struts-user-help@jakarta.apache.org>


Mime
View raw message