Re: Tomcat8 - How to configure ssl certificates for both https and two-way authentication

2017-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Senthil, On 8/8/17 4:03 PM, dsenthil...@gmail.com wrote: > >> Hello, >> >> I have configured ssl certificates for below requirements: >> >> 1. Tomcat server certificate configuration in 'server.xml' file >> to run tomcat server on port 443 and

RE: Problem enabling SSLv3 in Tomcat 8.5.15

2017-08-08 Thread Marc Dorsa
-Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Wednesday, June 21, 2017 2:31 PM To: Tomcat Users List Subject: Re: Problem enabling SSLv3 in Tomcat 8.5.15 On 21/06/17 19:04, Marc Dorsa wrote: >> Hi Tomcat Users, >> >> I am having a

Re: DeltaManager implementation

2017-08-08 Thread Mark Thomas
On 04/08/17 20:55, christop...@baus.net wrote: > We are still having an issue with some users losing session information. > I want to use synchronous updates for the DeltaManager. > To enable this should the channelSendOptions be set to 6? That isn't > clear to me from reading the documentation.

Re: Getting user role membership without context

2017-08-08 Thread Mark Thomas
Personally, I'd step through the JNDIRealm with a debugger (I use Eclipse) to see exactly what is going on. If you aren't set up for that, enabling debug logging for the JNDIRealm should provide some insight but it might not answer everything. Mark On 04/08/17 21:24, Alex O'Ree wrote: >

Re: [8.0.44] NPE when deploying to /manager/text/list with RemoteHostValve

2017-08-08 Thread Martynas Jusevičius
Hmm, strange. I tried "ping jenkins" from shell and it worked. On Tue, 8 Aug 2017 at 04.19, Zemian Deng wrote: > Hi Martynas, you are getting NPE because "request.getRemoteHost()" is > returning null value after you enableLookups! Maybe you have problem > resolving hostname

Re: Access to source IP address during authentication and authorization

2017-08-08 Thread tomcat
On 08.08.2017 14:21, i...@flyingfischer.ch wrote: Am 08.08.2017 um 14:05 schrieb Christopher Schultz: All, In spite of my (somewhat) recent work on the CredentialHandlers, I haven't been using Tomcat's container-provider authentication and authorization for over a decade. This is because I

Re: Access to source IP address during authentication and authorization

2017-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Markus, On 8/8/17 8:21 AM, i...@flyingfischer.ch wrote: > > Am 08.08.2017 um 14:05 schrieb Christopher Schultz: >> All, >> >> In spite of my (somewhat) recent work on the CredentialHandlers, >> I haven't been using Tomcat's container-provider

Re: Access to source IP address during authentication and authorization

2017-08-08 Thread Mark Thomas
On 08/08/17 13:44, Christopher Schultz wrote: > I have no problem with Tomcat having access to the IP address. I just > want Tomcat to make that IP address available to the authenticator > component in some way. https://bz.apache.org/bugzilla/show_bug.cgi?id=59750 Implementing that in a way

Re: Access to source IP address during authentication and authorization

2017-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 8/8/17 8:49 AM, Mark Thomas wrote: > On 08/08/17 13:44, Christopher Schultz wrote: > > > >> I have no problem with Tomcat having access to the IP address. I >> just want Tomcat to make that IP address available to the >> authenticator

Access to source IP address during authentication and authorization

2017-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, In spite of my (somewhat) recent work on the CredentialHandlers, I haven't been using Tomcat's container-provider authentication and authorization for over a decade. This is because I need access to the user's source IP address for auditing

Re: Access to source IP address during authentication and authorization

2017-08-08 Thread i...@flyingfischer.ch
Am 08.08.2017 um 14:05 schrieb Christopher Schultz: > All, > > In spite of my (somewhat) recent work on the CredentialHandlers, I > haven't been using Tomcat's container-provider authentication and > authorization for over a decade. This is because I need access to the > user's source IP address

Re: Access to source IP address during authentication and authorization

2017-08-08 Thread Mark Thomas
On 08/08/17 14:01, Christopher Schultz wrote: > Mark, > > On 8/8/17 8:49 AM, Mark Thomas wrote: >> On 08/08/17 13:44, Christopher Schultz wrote: > >> > >>> I have no problem with Tomcat having access to the IP address. I >>> just want Tomcat to make that IP address available to the >>>

Re: Access to source IP address during authentication and authorization

2017-08-08 Thread Zemian Deng
Hi, how about extends the "org.apache.catalina.authenticator.AuthenticatorBase"? or extends "FormAuthenticator" if you are using form based. The base class is actually a Valve, thus provide the "Request" object access. And to use it, just simply add as a valve in your context xml file. If I

Re: Access to source IP address during authentication and authorization

2017-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Zemian, On 8/8/17 9:36 AM, Zemian Deng wrote: > Hi, how about extends the > "org.apache.catalina.authenticator.AuthenticatorBase"? or extends > "FormAuthenticator" if you are using form based. The base class is > actually a Valve, thus provide

Re: Tomcat8 - How to configure ssl certificates for both https and two-way authentication

2017-08-08 Thread Mark Thomas
On 08/08/17 21:03, dsenthil...@gmail.com wrote: > >> Hello, >> >> I have configured ssl certificates for below requirements: >> >> 1. Tomcat server certificate configuration in 'server.xml' file to run >> tomcat server on port 443 and https >> >> > minSpareThreads="25" >>

Tomcat8 - How to configure ssl certificates for both https and two-way authentication

2017-08-08 Thread dsenthil . in
> Hello, > > I have configured ssl certificates for below requirements: > > 1. Tomcat server certificate configuration in 'server.xml' file to run tomcat > server on port 443 and https > > minSpareThreads="25" >maxSpareThreads="75" enableLookups="false" >