Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-23 Thread Jaikit Savla
I have not yet tried playing with firewall.  I was thinking in the lines of adding capability in filter to find if the request originated from localhost. Right now it just does string comparison.  Jaikit - Original Message - From: Ralph Plawetzki ra...@purejava.org To: Tomcat Users

AuthenticatorBase setChangeSessionIdOnAuthentication without cookies

2012-09-23 Thread Brian Burch
With reference to: https://issues.apache.org/bugzilla/show_bug.cgi?id=53584 I reproduced the problem using the sample war on a back-level svn version of the trunk, then confirmed the problem was fixed on a later level. I have been developing a new unit test case in

Re: AuthenticatorBase setChangeSessionIdOnAuthentication without cookies

2012-09-23 Thread Mark Thomas
On 23/09/2012 10:46, Brian Burch wrote: With reference to: https://issues.apache.org/bugzilla/show_bug.cgi?id=53584 I reproduced the problem using the sample war on a back-level svn version of the trunk, then confirmed the problem was fixed on a later level. I have been developing a

RE: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-23 Thread Martin Gainty
Jaikit You can ask Catalina to check the IP address, or host name, on every incoming request directed to the surrounding elements a href=engine.htmlEngine/a, a href=host.htmlHost/a, or a href=context.htmlContext/a element. The remote address or name will be checked against a

Re: tomcat manager login

2012-09-23 Thread Mohsen Jamali
forgot to uncomment usernames and roles! excuse and thanks :) On Sat, Sep 22, 2012 at 3:31 PM, Tim Watts t...@cliftonfarm.org wrote: On Sat, 2012-09-22 at 14:31 +0330, Mohsen Jamali wrote: Hi guys, After searching the web about how to deploy a war file on Tomcat. The simplest way is to

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-23 Thread Konstantin Kolinko
2012/9/23 Martin Gainty mgai...@hotmail.com: Jaikit You can ask Catalina to check the IP address, or host name, on every incoming request directed to the surrounding elements a href=engine.htmlEngine/a, a href=host.htmlHost/a, or a href=context.htmlContext/a element. The

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-23 Thread Konstantin Kolinko
2012/9/23 Jaikit Savla jaikit.sa...@yahoo.com: Hello Users, I have some admin api's which I want to have restricted access - such that only if the request originates from localhost - it will execute. For that I am using tomcat's RemoteAddrfilter filter filter-nameRemote Address

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-23 Thread Jaikit Savla
Hi, You are right it does regrex matching. I wanted to say that it does not do any kind of dnslookup in filter.  @configuration: I do not have any particular configuration or firewall set up. I have mentioned below output from tcpdump (listening on loopback interface) and as you can see it get