why form based authentication does not specify realm
Yan Zhou
Ranch Hand
Joined: Sep 02, 2003
Posts: 136
posted
0
Hi,
BASIC authentication allows one to specify realm, but Form-Based authentication doesnot. I wonder why?
Also, how does BASIC authentication use the realm that is specified in DD?
Thanks. Yan
Ulf Dittmer
Marshal
Joined: Mar 22, 2005
Posts: 35241
7
posted
0
Not following at all. Both basic and form authentication are specified in the web.xml file, which has no concept of realms. I'm only familiar with Tomcat, where you specify realms in the server.xml file, which is independent of any actual method of authentication you might want to use. Can you clarify where you see the difference between basic auth and form auth?