authentication 2 « Security « Spring Q&A





1. Disable Authentication    forum.springsource.org

As far as I know Acegi doesn't support this out of the box. The easiest way to achieve such functionality would probably be to write an event listener similar to Acegi's ...

2. Basic Authentication & HttpSessions    forum.springsource.org

Basic Authentication & HttpSessions Were successfully using Acegi 0.8.3 on a project that has both form authentication and basic authentication. The basic authentication is used for web services. I noticed however, ...

3. Authentication via parameters    forum.springsource.org

Authentication via parameters Hi i recently configure acegi in my application, it is good if i use form-based authentication but i have another entrance to my application which is throw parameters, ...

4. Multiple Authentication problem    forum.springsource.org

Multiple Authentication problem I have a web app that will be using Acegi using roles and voters. The app currently uses CAS as its authentication source. No issues. Now we need ...

5. Adding extra authentication criteria    forum.springsource.org

Adding extra authentication criteria I've subclassed PasswordDaoAuthenticationProvider and PasswordAuthenticationDao to load my UserDetails and return my Authentication object. The problem is that my client would like some extra checks to be ...

6. authentication loads user twice    forum.springsource.org

authentication loads user twice I'm wondering if it's normal behavior for the authentication provider and/or security interceptor stuff to pull the User object from the db twice when the user logs ...

7. Stored procedure authentication    forum.springsource.org

I have a requirement for my application to be able to call a stored procedure, passing username and password. The stored procedure will return true or false to say if the ...

8. Can anyone help me on using Authentication Manager?    forum.springsource.org

Oct 13th, 2005, 12:37 PM #1 greentag View Profile View Forum Posts Private Message Junior Member Join Date Oct 2005 Posts 8 Can anyone help me on using Authentication Manager? Im ...

9. problem with multiple authentication providers    forum.springsource.org

problem with multiple authentication providers I'm trying to get a quick sample app to authenticate against ldap or another provider, in this case, the in-memory dao provider. Code: ...





10. forcing authentication multiple times    forum.springsource.org

forcing authentication multiple times I have an application to write that requires various degrees of security - that is the same user will have to log in with different passwords revealing ...

11. Authentication process    forum.springsource.org

Authentication process Hi, I have recently started working with Spring and Acegi authentication, and have some trouble understanding how it works. I have set up two filters, an authentication processing filter ...

12. Question about Authentication.isAuthenticated    forum.springsource.org

Question about Authentication.isAuthenticated Hi, I am a newbie to Acegi and have a question about Authentication.isAuthenticated. I have written a custom class called MySecurityDAO that implements PasswordAuthenticationDAO. I was able to ...

13. Writing a custom authentication mechanism    forum.springsource.org

Hey, I am currently investigating whether I can use Acegi security as part of a new project I am involved with. The project already relies quite heavily on Spring and as ...

14. I think I have a fundamental misunderstanding of Authentication attempts    forum.springsource.org

Jan 4th, 2006, 06:01 PM #1 shan View Profile View Forum Posts Private Message Member Join Date Sep 2005 Location Toronto, Canada Posts 42 I think I have a fundamental misunderstanding ...

15. Authentication problem    forum.springsource.org

Authentication problem I need a litle help to understand how the ApplicationSecurityManager and the authentication mechanism works. That the DefaultApplicationSecurityManager stores the authentication token obtained from the login procedure in some ...

16. Newbie question, i.e., how to get authentication to work...    forum.springsource.org

Newbie question, i.e., how to get authentication to work... Hi, I am exploring the possibilities of changing our EJB/J2EE based system to be running on Spring&Acegi&Tomcat as soon as possible. I ...





17. Custom authentication with multiple fields    forum.springsource.org

Hi forum, I would like to implement custom authentication where instead of just a userid/password pair, I would like to authenticate my users with a userid/domain/password pair (i.e. 3 fields instead ...

18. Confusion with where authentication is enforced    forum.springsource.org

Confusion with where authentication is enforced I am confused as to where the actual authentication checks are enforced. I am using 1.0 RC2 and have set up a Filter Chain Proxy ...

19. in jaxrpc,how to get authentication from contextHolder    forum.springsource.org

my application is based on GUI+web services(Jaxrpc)+ bussiness + DAO, in GUI,I use CAS to authencticate ,and add the success authentication to ContextHolder. but I want to visit web services ,I ...

20. plain authentication w/o the locked, enable checking    forum.springsource.org

plain authentication w/o the locked, enable checking Hi, In one of my project that require 2 step registration. Step 1, setup the basic username, email. A generated password will be sent ...

21. Custom Authentication manager and EhcacheBaseduser    forum.springsource.org

Custom Authentication manager and EhcacheBaseduser Hi All, I am having an issue where I keep getting cache misses. I checked my cachestore and it looks like its never being populated with ...

22. Where can i feed in additional details for the Authentication.getDetails() ?    forum.springsource.org

Hi, i have additional information for my user that i want to save in the Authentication object and retrieve them with the getDetails() method. I'm using UserNamePasswordAuthenticationToken, but i don't see ...

23. Default Authorities (Can we just do authentication?)    forum.springsource.org

I would like to start out by just having authentication, and not worry about authorities. Can Ageci be configured like that? I've got my configuration setup, and an LDAP server running ...

24. Going to multiple targetURLs after authentication?    forum.springsource.org

Going to multiple targetURLs after authentication? Hi guys, Is it possible with Acegi to configure it in such a way that it would be possible to redirect the user (upon successful ...

25. Help me understand why I am not seeing authentication    forum.springsource.org

May 15th, 2006, 10:46 AM #1 mbabauer View Profile View Forum Posts Private Message Member Join Date Feb 2006 Posts 88 Help me understand why I am not seeing authentication I ...

26. Multiple authentication sources use case    forum.springsource.org

Multiple authentication sources use case I am going to be authenticating against multiple authentication sources for different contexts and had an idea about how to implement this but wanted to see ...

27. What no BASIC authentication?    forum.springsource.org

What no BASIC authentication? Hi, I get a AuthenticationCredentialsNotFoundException when I attempt to wire in BASIC authentication using the standard Acegi Spring beans. The standard form-based authentication works fine. Here is ...

28. Custom Authentication    forum.springsource.org

In my webapp, I need to have three parameters from the user in order to authenticate him, namely the user, password and a domain. Can this be done using acegi, if ...

29. hybrid authentication    forum.springsource.org

I'm wondering if it would be possible to use a combination of jdbcdaoimpl and ldapdaoimpl with acegi security in spring. What I would want is for the authentication to be based ...

30. Need help on populating user object after authentication by Site Minder...    forum.springsource.org

Need help on populating user object after authentication by Site Minder... hi all, the application i am doing at the moment requires site minder authentication (login page and database not residing ...

31. Authentication with Spring    forum.springsource.org

Authentication with Spring Hi everybody. I'm trying to protect some web pages(.jsp) with aspect. I have a index.jsp with a form, the user compile the form, if user/pass are corrected he ...

32. Need help with Authentication Process    forum.springsource.org

Jul 14th, 2006, 01:33 PM #1 Klinci View Profile View Forum Posts Private Message Junior Member Join Date Jul 2006 Posts 4 Need help with Authentication Process I've configured an web-url ...

33. Cannot get LdapAuthenticationProvider to authenticate when using clear text pw.    forum.springsource.org

Cannot get LdapAuthenticationProvider to authenticate when using clear text pw. I'm using Acegi 1.0.0 with Spring and OpenLDAP. I populated my ldap repository with some sample data, including users (INetOrgPerson) with ...

34. Post authentication task    forum.springsource.org

Post authentication task Hi, I have a little question : I need to perform a specific task after a successfull authentication : I use Struts to internationalize my application, by default ...

35. additionalAuthenticationChecks is called twice with each authentication    forum.springsource.org

Hi, I'm trying to add a bad login count within the additionalAuthenticationChecks method for my extension of the DaoAuthenticationProvider. However debugging shows that additionalAuthenticationChecks is called twice with each authentication. Is ...

36. Authentication object get Lost    forum.springsource.org

Aug 3rd, 2006, 04:23 AM #1 wimalasuriyaib View Profile View Forum Posts Private Message Junior Member Join Date Aug 2006 Posts 4 Authentication object get Lost Hi Im trying to configure ...

37.  doesn't work    forum.springsource.org

doesn't work Hi all, - if I'm not logged on, this code in jsp page "USER: " printed as "USER:". System.out.println(request.isUserInRole("ROLE_ADMI N")); - prints false - if I'm ...

38. How to Authenticate.    forum.springsource.org

Aug 9th, 2006, 09:49 AM #1 raghavender View Profile View Forum Posts Private Message Junior Member Join Date Aug 2006 Posts 1 How to Authenticate. Hi, I am using Acegi Secuirty ...

39. enable authentication with ConnectorServerFactoryBean    forum.springsource.org

enable authentication with ConnectorServerFactoryBean I need to use ConnectorServerFactoryBean to create the mbeanserver because I need to access jmx behind a firewall, and cannot have the random port thing going. I ...

40. DAO and Baisc Authentication together    forum.springsource.org

Is it possible to have both BASIC authentication and Dao authentication together? I can get both working on their own just fine but not together. I have a site where users ...

41. x.509 authentication    forum.springsource.org

42. HttpServletRequest in custom authentication    forum.springsource.org

HttpServletRequest in custom authentication I have extended AbstractUserDetailsAuthenticationProvider and overrided retrieveUser for my custom authentication. I need to access HttpServletRequest in retrieveUser to retrieve e.g. getContextPath(). The requirement is I call ...

43. Double Authentication    forum.springsource.org

Double Authentication My users use Remember-Me Authentication. This is great because they do not have to sign in to use the website; their preferences are automatically loaded. My problem here though ...

44. OS User Authentication    forum.springsource.org

Hi there, We are developing an intranet app, someone suggests us to use acegi security... We need to authenticate os user with our application users table, any idea? I mean, not ...

45. Custom user authentication using the department of a user    forum.springsource.org

Custom user authentication using the department of a user Hi, I'm developing an application that requires a custom user authentication using the username, the password, an the department of the user, ...

46. How to build a simple Authentication system?    forum.springsource.org

I am building a web application which I want to build an authentication system for accessing different jsp(s). I got some tables storing the user information (username, password, access level, etc) ...

47. Unix /etc/passwd for Authentication?    forum.springsource.org

48. Authenticate multiple users    forum.springsource.org

Hello, I am able to use ldap authentication to AD. I have a doubt. If I have two users from the group 'ou=people' and two users from the group 'ou=test', what ...

49. Can we skip Authentication?    forum.springsource.org

I am having user-resource mapping in my database and I want to allow user based on mapping without authenticating that user. How can we achieve this using acegi.

50. DI of Authentication object    forum.springsource.org

Hi, Currently the mechanism for accessing the authentication object as described in the users guide is the following: Code: Object obj = SecurityContextHolder.getContext().getAuthentication().getPrincipal(); if (obj instanceof UserDetails) { String username = ...

51. novell edirectory and authentication token    forum.springsource.org

novell edirectory and authentication token Hello I have implemented authentication and authorization using openldap server. Now I want to use novell edirectory for the same. Is there any changes that I ...

52. Best way to design authentication service    forum.springsource.org

Best way to design authentication service We are developing an application in which we use Flex UI in the front end and Spring DAO, business, service layers in the backend. I ...

53. Implements a double authentication functionary    forum.springsource.org

Implements a double authentication functionary Hi All, I have a use case that required a special security requirement; the requirement is after the user is logged in he can perform some ...

54. Updatin Authentication object    forum.springsource.org

Hi, i am working with Acegi, and i would like update the Authentication object when the user of my application changes his password. How i could do it?

55. Automatic authentication    forum.springsource.org

So you are trying to do some kind of single sign on? If you look at the token based authentication that does a similar thing to what you are after. You ...