Two Laptop Bag*
The moose likes Security and the fly likes why form based authentication does not specify realm Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of Android Security Essentials Live Lessons this week in the Android forum!
JavaRanch » Java Forums » Engineering » Security
Bookmark "why form based authentication does not specify realm" Watch "why form based authentication does not specify realm" New topic
Author

why form based authentication does not specify realm

Yan Zhou
Ranch Hand

Joined: Sep 02, 2003
Posts: 137
Hi,

BASIC authentication allows one to specify realm, but Form-Based authentication doesnot. I wonder why?

Also, how does BASIC authentication use the realm that is specified in DD?

Thanks.
Yan
Ulf Dittmer
Marshal

Joined: Mar 22, 2005
Posts: 41125
    
  45
Not following at all. Both basic and form authentication are specified in the web.xml file, which has no concept of realms. I'm only familiar with Tomcat, where you specify realms in the server.xml file, which is independent of any actual method of authentication you might want to use. Can you clarify where you see the difference between basic auth and form auth?


Ping & DNS - my free Android networking tools app
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: why form based authentication does not specify realm
 
Similar Threads
HTTP Status 403 Access to the requested resource has been denied
login config resource not available
question about authentication mechanisms
Security
Form based authentication / Realms