This week's book giveaway is in the Servlets forum.
We're giving away four copies of Murach's Java Servlets and JSP and have Joel Murach on-line!
See this thread for details.
The moose likes Security and the fly likes why form based authentication does not specify realm Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of Murach's Java Servlets and JSP this week in the Servlets forum!
JavaRanch » Java Forums » Engineering » Security
Bookmark "why form based authentication does not specify realm" Watch "why form based authentication does not specify realm" New topic
Author

why form based authentication does not specify realm

Yan Zhou
Ranch Hand

Joined: Sep 02, 2003
Posts: 137
Hi,

BASIC authentication allows one to specify realm, but Form-Based authentication doesnot. I wonder why?

Also, how does BASIC authentication use the realm that is specified in DD?

Thanks.
Yan
Ulf Dittmer
Marshal

Joined: Mar 22, 2005
Posts: 41089
    
  44
Not following at all. Both basic and form authentication are specified in the web.xml file, which has no concept of realms. I'm only familiar with Tomcat, where you specify realms in the server.xml file, which is independent of any actual method of authentication you might want to use. Can you clarify where you see the difference between basic auth and form auth?


Ping & DNS - my free Android networking tools app
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: why form based authentication does not specify realm
 
Similar Threads
HTTP Status 403 Access to the requested resource has been denied
login config resource not available
question about authentication mechanisms
Security
Form based authentication / Realms