File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
The moose likes BEA/Weblogic and the fly likes Form Based authentication Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Products » BEA/Weblogic
Bookmark "Form Based authentication" Watch "Form Based authentication" New topic

Form Based authentication

JeanLouis Marechaux
Ranch Hand

Joined: Nov 12, 2001
Posts: 906
Hi folks,
Please excuse the intrusion of a WebSphere guy here, but I would like to compare a feature between the two app servers.
Using Form Based authentication with WebLogic (7 or 6), do you have to enable a Single Sign On (sso) feature on the server ?
In webSphere, the form based mechanism does not work if the sso is not enabled....

/ JeanLouis<br /><i>"software development has been, is, and will remain fundamentally hard" (Grady Booch)</i><br /> <br />Take a look at <a href="" target="_blank" rel="nofollow">Agile OpenUP</a> in the Eclipse community
JeanLouis Marechaux
Ranch Hand

Joined: Nov 12, 2001
Posts: 906
Come on WebLogic gurus !
Don't tell me you've never implemented a form based login !!
Dave Landers
Ranch Hand

Joined: Jul 24, 2002
Posts: 401
You just do it. No extra config required. Just do what the servlet spec says - set the auth to FORM in web.xml and write the login form.
In WebLogic, Single Sign On between webapps is controled by the session cookie name (JSESSIONID). Those webapps that share the same cookie name participate in SSO with each other. I guess you could say they form some sort of "SSO group".
But it has nothing at all to do with how the auth is done (FORM vs BASIC).
JeanLouis Marechaux
Ranch Hand

Joined: Nov 12, 2001
Posts: 906
Thanks a lot Dave.
I agree. Here's the link:
subject: Form Based authentication
Similar Threads
Form based authentication and SSO
jGuard, JAAS configuration for each webapp in j2ee
Security Maintenance
Websphere Security Caching
login authentication