Clarification on authentication notes needed
"Claudia Frers" <[email protected]> Thu, 27 Sep 2007 15:42:29 +0200
| Newsgroups | gmane.comp.java.jspwiki.user |
|---|---|
| Message-ID | <[email protected]> |
Since I want to use JSPWiki in a real production environment, I have carefully read the *Advanced Installation* section of Andrews excellent notes here ( http://doc.jspwiki.org/2.4/wiki/InstallingJSPWiki#section-InstallingJSPWiki-AdvancedInstallation) and here( http://doc.jspwiki.org/2.4/wiki/Security#section-Security-IntegratingJSPWikiWithContainerManagedAuthentication ). The document says that container authentication is the preferred method in many corporate environments but it at no time warns against the use of custom authentication. I want a KISS solution that is suitable for multi wikis running as separate webapps on the internet. Can I safely use Custom authentication* and not sacrifice hopes for a high-security configuration? Thx, Claudia *which looks up and validates the user's id and password against those stored in JSPWiki's UserDatabase