Re: Getting a Java Sign-on Dialog

[Patrick L Archibald <Patrick.Archibald@xxxxxxxxxxxxx>]

Ivan,

I use a servlet filter to accomplish this but you can create a regular 
servlet to do it as well.

My filter servlet basically gets the user profile and password from the 
basic authentication header and does the following:


AS400 as400 = new AS400("yourAs400Here");

as400.authenticate(userProfile, password);



If it fails, I do the following to prompt the user for his profile and 
password:



response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);

response.setHeader("WWW-Authenticate", "BASIC realm=\"HTC_Intranet\"");




I can give more details about how to get the user id and password from 
the http basic authentication header if needed.

Thanx, PLA

Ivan Hurtado wrote:

> I am in the early design/architecture phase of an
> AS400 Server Side web app, and I am trying to make a
> decision on our authentication strategy. I have never
> developed Java using an as400 as the server, so please
> bear with me.
>
> I have the "iSeries & AS/400 Java at Work" book by Don
> Denoncourt (which seems to be a very good 400
> reference) and with examples from there I was able to
> create a Java app (running from my desktop) that
> connects to the as400. Upon connection, it brings up
> the Java Sign-on dialog auto-magically which is nice.
> But, I was hoping to be able to do something similar
> for my server side app by putting similar code in some
> Login servlet. The point is that I would like the
> as400 to handle the authentication for me if possible,
> to eliminate the need for creating user tables. How
> can I best accomplish this?
>
> Thanks,
> Ivan Hurtado
> Sr. Programmer
> Hull & Company, Inc.
> iva030@xxxxxxxxx
> ihurtado@xxxxxxxxxx
>
>
> __________________________________
> Do you Yahoo!?
> Get better spam protection with Yahoo! Mail.
> http://antispam.yahoo.com/tools
> _______________________________________________
> This is the Java Programming on and around the iSeries / AS400 (JAVA400-L) 
> mailing list
> To post a message email: JAVA400-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/java400-l
> or email: JAVA400-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/java400-l.
>
>
>
>