Spring Security: 2 login method in a web app

[childmetal]

Hi all,

I've a problem. I develop an application that has two login. First login uses user/pwd stored on LDAP. Second login is an authentication with certificates.

How can I develop this two method with spring security? It's possible?

Thanks

[Luke Taylor]

Yes, you can add both X.509 and form-login mechanisms to the filter chain. If a user supplies a client certificate that will be used, otherwise they will be prompted to login.

[childmetal]

Thanks,

can you give me an example, please?
I'm newby of spring security

[Luke Taylor]

Both are explain in the reference manual, and form-login is used in the "tutorial" sample application, for example. I would start by running that application and then adding X.509 authentication to it.

If you can be more specific about what you want to know then please post a follow-up question.