I have a question regarding authenication via CLIENT-CERT and FORM based. I'm trying to figure out the best way or any way to setup a mutli login configuration where the user can choose how they want to login (Client Cert or Form Based). Currently, I can set the web.xml file in portal-server.war to the followng and login via form:
<login-config> <auth-method>FORM</auth-method> <realm-name>JBoss Portal</realm-name> <form-login-config> <form-login-page>/login.jsp</form-login-page> <form-error-page>/login.jsp</form-error-page> </form-login-config> </login-config> I can also change it to the following and login successfully via cert: (using BaseCertLoginModule and custom module to get role info) <login-config> <auth-method>CLIENT-CERT</auth-method> <realm-name>portal</realm-name> </login-config> Problem is I want the user to be able to click one of 2 links to login... Link 1 will log the user in via FORM and Link 2 will log the user in via CERT. Is there a way I can do that. BTW, I'm not using a LDAP as user DB. I'm only using Oracle.
This topic may help you http://wiki.apache.org/tomcat/SSLWithFORMFallback