Form-based Authentication using Struts

[Matt Raible <ma...@yahoo.com>]

I am implementing form-based authenication and have a couple of questions.

I have all my JSP's setup so they can be accessed with no extension.  I am also
using a DefaultAction class so these JSP's can be accessed via a .do extension.

Can you send me ideas on how you implemented form-based authentication with
struts and the .do extension?

Here are the my entries in web.xml:

<!-- Standard Action Servlet Mapping -->
  <servlet-mapping>
    <servlet-name>action</servlet-name>
    <url-pattern>*.do</url-pattern>
  </servlet-mapping>

  <security-constraint>
    	<web-resource-collection>
	        <web-resource-name>LDAPSecurity</web-resource-name>
		<description>LDAP-controlled Security</description>
	        <url-pattern>/*.do</url-pattern>
    	    <http-method>GET</http-method>
	        <http-method>POST</http-method>
    	</web-resource-collection>

    	<auth-constraint>
		<description>no description</description>
	        <role-name>Employees</role-name>
    	</auth-constraint>

    	<user-data-constraint>
		<description>no description</description>
	        <transport-guarantee>NONE</transport-guarantee>
    	</user-data-constraint>
   </security-constraint>

Should this work?  I can't seem to get it to.

Thanks,

Matt

__________________________________________________
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/