Bruno.Melloni@(protected):

> A trivial solution is to store something (anything) in the user session during login, and then retrieve it in the JSP. If the retrieved value is not null, then the user is logged in. If the user is not logged in, you can redirect him to the login or an error page.
>
> Of course, this is only one possible solution. Others exist. Which is best depends on what you are trying to accomplish in your site.
>
> b.
>

Yes; but I don't want to check for whether user is logged in or not in
every page... I want the page to only be accessible to a logged in user.
  Basically I want single sign on; the webapp should not be accessible
at all except to an authenticated user.



---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@(protected)
For additional commands, e-mail: tomcat-user-help@(protected)