From: <glassfish_at_javadesktop.org>
Date: Sun, 12 Sep 2010 11:53:36 PDT

Hello all.
I'm testing servlet 3.0 programmatic security facilities.
The problem come up when login method fail because validation had incorrect (bad password or bad username). Specifications said that ServletException is throws if any of getRemoteUser(), getUserPrincipal() or getAuthType() are non-null, if the configured authenticator does not support user name and password authentication or if the authentication fails.

So ¿Is it impossible distinct errors (when "authentication fails" of other two possible errors)?

Thanks and apologies for my poor English.
[Message sent by forum member 'angelcervera']

http://forums.java.net/jive/thread.jspa?messageID=482463