Re: Getting a Java Sign-on Dialog -- JAVA400-L

Ivan,

I use a servlet filter to accomplish this but you can create a regular servlet to do it as well.

My filter servlet basically gets the user profile and password from the basic authentication header and does the following:

AS400 as400 = new AS400("yourAs400Here");

as400.authenticate(userProfile, password);

If it fails, I do the following to prompt the user for his profile and password:

response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);

response.setHeader("WWW-Authenticate", "BASIC realm=\"HTC_Intranet\"");

I can give more details about how to get the user id and password from the http basic authentication header if needed.

Thanx, PLA

Ivan Hurtado wrote:

I am in the early design/architecture phase of an
AS400 Server Side web app, and I am trying to make a
decision on our authentication strategy. I have never
developed Java using an as400 as the server, so please
bear with me.

I have the "iSeries & AS/400 Java at Work" book by Don
Denoncourt (which seems to be a very good 400
reference) and with examples from there I was able to
create a Java app (running from my desktop) that
connects to the as400. Upon connection, it brings up
the Java Sign-on dialog auto-magically which is nice.
But, I was hoping to be able to do something similar
for my server side app by putting similar code in some
Login servlet. The point is that I would like the
as400 to handle the authentication for me if possible,
to eliminate the need for creating user tables. How
can I best accomplish this?

Thanks,
Ivan Hurtado
Sr. Programmer
Hull & Company, Inc.
iva030@xxxxxxxxx
ihurtado@xxxxxxxxxx


__________________________________
Do you Yahoo!?
Get better spam protection with Yahoo! Mail.
http://antispam.yahoo.com/tools
_______________________________________________
This is the Java Programming on and around the iSeries / AS400 (JAVA400-L) 
mailing list
To post a message email: JAVA400-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/java400-l
or email: JAVA400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/java400-l.

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.