Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Andrei Tchijov
Hi, I want to be able to add my own authentication method (login-config/ auth-method) as one of possible choices. Is it possible to do so without re-compiling tomcat? Ideally, I would love to be able to achieve my goal by changing server.xml file (and adding some jars with my custom

Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Szabolcs Márton
Hi! its an options, i use sometime. Create a filter. a class likes this. public class AuthenticationFilter implements Filter { private static Logger log = Logger.getLogger(AuthenticationFilter.class); public void doFilter(ServletRequest request, ServletResponse response,

Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Andrei Tchijov
sZabi, Thnkx for response. I am actually already using similar approach. It is easy to implement, but it has one problem (from my point of view). It is not very user friendly. It is much easier to explain to end user that if he/she is using FORM as authentication method, all he/she

Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Pid
Andrei Tchijov wrote: Hi, I want to be able to add my own authentication method (login-config/auth-method) as one of possible choices. Is it possible to do so without re-compiling tomcat? Ideally, I would love to be able to achieve my goal by changing server.xml file (and adding some

Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Andrei Tchijov
I will be first to admin that I may be silly bugger, but I can not see how JAASRealm can help me. Nowhere in the code I can see any indication of how to get to HTTP Request and HTTP Response from Realm code. Please enlighten... Andrei On Jun 7, 2007, at 12:47 PM, Pid wrote: Andrei

RE: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Caldarale, Charles R
From: Andrei Tchijov [mailto:[EMAIL PROTECTED] Subject: Re: Is it possible to introduce new authentication method without modifying tomcat? Nowhere in the code I can see any indication of how to get to HTTP Request and HTTP Response from Realm code. Why would you want to do

Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Andrei Tchijov
not see how JAASRealm (or any Realm for that matter) can help me Andrei On Jun 7, 2007, at 4:47 PM, Caldarale, Charles R wrote: From: Andrei Tchijov [mailto:[EMAIL PROTECTED] Subject: Re: Is it possible to introduce new authentication method without modifying tomcat? Nowhere in the code I

RE: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Caldarale, Charles R
From: Andrei Tchijov [mailto:[EMAIL PROTECTED] Subject: Re: Is it possible to introduce new authentication method without modifying tomcat? I was just commenting that I can not see how JAASRealm (or any Realm for that matter) can help me Specifying JAASRealm as the Realm gives you

Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Andrei Tchijov
[mailto:[EMAIL PROTECTED] Subject: Re: Is it possible to introduce new authentication method without modifying tomcat? I was just commenting that I can not see how JAASRealm (or any Realm for that matter) can help me Specifying JAASRealm as the Realm gives you the opportunity to implement your own

RE: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Caldarale, Charles R
From: Andrei Tchijov [mailto:[EMAIL PROTECTED] Subject: Re: Is it possible to introduce new authentication method without modifying tomcat? My problem it twofold. In order to make an authentication decision ... - I need to have an access to some information from HTTP Request, - I

Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andrei, Check out securityfilter (http://securityfilter.sourceforge.net). It implements a filter as suggested by someone else, but it has been used by others. Why reinvent the wheel? There are two different interfaces that you can implement in order

Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Bill Barker
your Authenticator instead of one of it's own. On Jun 7, 2007, at 5:06 PM, Caldarale, Charles R wrote: From: Andrei Tchijov [mailto:[EMAIL PROTECTED] Subject: Re: Is it possible to introduce new authentication method without modifying tomcat? I was just commenting that I can not see how

Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Andrei Tchijov
=com.myfirm.mypackage.MyAuthenticator / /Context This will cause Tomcat to use your Authenticator instead of one of it's own. On Jun 7, 2007, at 5:06 PM, Caldarale, Charles R wrote: From: Andrei Tchijov [mailto:[EMAIL PROTECTED] Subject: Re: Is it possible to introduce new authentication method without

Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Bill Barker
authentication method without modifying tomcat? I was just commenting that I can not see how JAASRealm (or any Realm for that matter) can help me Specifying JAASRealm as the Realm gives you the opportunity to implement your own LoginModule. Such a LoginModule can utilize any number