Re: Basic and Form Authentication

2009-12-11 Thread Anthony Jay
Hi all, Winners never quit and quitters never win See. http://marc.info/?l=tomcat-userm=126047599208053w=2 Thanks for the assistance!!! Tony Anthony Jay wrote: yes, I was aware of this, as mentioned on a previous mail, but as its neither production ready nor complete it would be a huge

Re: Contexts and Path and Authentication

2009-12-11 Thread Anthony Jay
Excellent. Now I have an elegant plan B in case my current apache-mod_auth_mysql-tomcat-form-based-authentication solution proves impractical. http://marc.info/?l=tomcat-userm=126047599208053w=2 Regards, Tony Christopher Schultz wrote: securityfilter (http://securityfilter.sourceforge.net) can

Re: Contexts and Path and Authentication

2009-12-10 Thread Anthony Jay
for the input, all ideas are most welcome! Tony /Tony On 09/12/2009 21:07, Anthony Jay wrote: Hi All, I am having tremendous difficulty configuring contexts on tomcat. I've had to split my perfectly working application into two applications as the jsp now requires Form based authentication

Re: Basic and Form Authentication

2009-12-10 Thread Anthony Jay
yes, I was aware of this, as mentioned on a previous mail, but as its neither production ready nor complete it would be a huge risk. I am beginning to think that I am attempting the impossible... After several weeks banging my head against a wall (I have a sore neck) I am giving this one more day

Re: Contexts and Path and Authentication

2009-12-10 Thread Anthony Jay
SOLVED Also the issue with Multiple Authentication Mechanisms My head is sore from banging it against a wall but I THINK that I have come up with a rather elegant solution. Well its a bit obvious in one way but I suppose I had to go through all the pain first. There was alot of pain. Just to

Contexts and Path and Authentication

2009-12-09 Thread Anthony Jay
Hi All, I am having tremendous difficulty configuring contexts on tomcat. I've had to split my perfectly working application into two applications as the jsp now requires Form based authentication and the XML components require Http Basic authentication as before. As I've learned the very hard

Re: Contexts and Path and Authentication

2009-12-09 Thread Anthony Jay
Many thanks Chuck and Ken for the tip. I am surprised that the solution is a 'hack' rather than configuration, but kinda glad that I wasn't losing my marbles. URL Rewriting is probably going to be the easiest way out, I am considering using mod_jk on the apache side so I could get away with using

Re: Contexts and Path and Authentication

2009-12-09 Thread Anthony Jay
Hi, FYI just hit another stumbling block which may be of interest to other users. UrlRewriteFilter will not forward any of my requests, even to the sample demo rule for /rewrite-status/ itself! It will, however, redirect perfectly well (when type is changed to type=redirect) meaning that I

Re: Basic and Form Authentication

2009-12-01 Thread Anthony Jay
to continue) Tony -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Anthony, On 11/30/2009 4:53 AM, Anthony Jay wrote: Is is possible to have an application that serves content protected by BASIC and FORM based auth? As Mark points out, the servlet spec says not in the same webapp. Tomcat

Re: Basic and Form Authentication

2009-12-01 Thread Anthony Jay
not be available in a stable form for many months to come. That was a big disappointment! Many thanks, Tony Peter Crowther wrote: 2009/12/1 Anthony Jay anthony...@fastmail.fm: As for cross application communication I will have to revisit our own code to see if there are static/singleton

Basic and Form Authentication

2009-11-30 Thread Anthony Jay
Hi, Is is possible to have an application that serves content protected by BASIC and FORM based auth? i.e. JSP protected by FORM Servlets that process XML use http BASIC? I could deploy seperate apps for each type but I would then lose access to application specific information e.g.

Re: Some advice on apache tomcat

2009-11-19 Thread Anthony Jay
but it seems to have a commerical license. openCMS looks promising (but no blogging) any recommendations? Tony On Tue, 17 Nov 2009 10:02 +, Pid p...@pidster.com wrote: On 16/11/2009 22:07, André Warnier wrote: Anthony Jay wrote: My main issue now is about how the authentication works

Re: Some advice on apache tomcat

2009-11-17 Thread Anthony Jay
accepting that almost everyone else knows more than me Tony On Tue, 17 Nov 2009 10:02 +, Pid p...@pidster.com wrote: On 16/11/2009 22:07, André Warnier wrote: Anthony Jay wrote: My main issue now is about how the authentication works between Tomcat and Apache. That's the only one

Some advice on apache tomcat

2009-11-16 Thread Anthony Jay
Hi, I am in need of some advice. My current setup is a web application running on Jboss which serves static and dynamic content, jsp, servlets and xml on two non load balanced servers (hot spare using mysql replication). It currently uses Http Basic Authentication over SSL. This has

RE: Some advice on apache tomcat

2009-11-16 Thread Anthony Jay
Hi Neil, Thanks for the comments, I really appreciate hearing from someone that has actual production experience using these technologies! To answer your question below, I *could* have all my servlets in one webapp but that would not be my preference. For example I would like the capability

Re: Java Out of Heap Issue

2009-11-16 Thread Anthony Jay
What I have found works well in some circumstances where you do not have a profiler to hand. 1. Look for static declarations in your code that point to singletons or collection objects. They might just grow and grow 2. You may not be using third party libs correctly, e.g. Not closing

Re: Some advice on apache tomcat

2009-11-16 Thread Anthony Jay
Thanks. Squid may be a contender but I need the CMS and blogging that comes with apache/php. Although maybe someday our traffic may get to the point where we will need squid to keep up! Now that would be a good problem to have! Thanks for the pointer. On Mon, 16 Nov 2009 15:36 -0800, Elli Albek

Re: Some advice on apache tomcat

2009-11-16 Thread Anthony Jay
ready) for apache or am I just really bad at finding things? I would really like to force apache to do as much as possible of the ssl and authn and leave tomcat to handle the actual work! Regards, Tony On Mon, 16 Nov 2009 21:07 +, Pid p...@pidster.com wrote: On 16/11/2009 17:53, Anthony Jay