As far as a Tomcat method, the only thing I know of is J_SECURITY_CHECK,
however Tomcat needs to feel like it redirected you there rather than
something else doing so.  I have also played around with the JA-SIG Java CAS
Client in reference to the HTTP Servlet Request wrapper.  As far as the
Tomcat AccessLogValve is concerned, the filter doesn¹t work currently
because it is applied at the context / application level where as
AccessLogValve is at the server level and most likely handled before the
request is passed onto the application.

Perhaps a server-wide filter could work.  Let me see about chatting with
some of the Tomcat folks about it.

Thanks,
A- 


On 11/25/08 11:10 AM, "Scott Battaglia" <[EMAIL PROTECTED]> wrote:

> Does Tomcat expose a method for associating with it?
> 
> We set the remote user (as long as you enable that filter).  I'm not sure what
> else can be done.
> 
> -Scott
> 
> -Scott Battaglia
> PGP Public Key Id: 0x383733AA
> LinkedIn: http://www.linkedin.com/in/scottbattaglia
> 
> 
> On Tue, Nov 25, 2008 at 12:00 PM, Andrew Ralph Feller, afelle1
> <[EMAIL PROTECTED]> wrote:
>> QUESTION:
>> Is there a way to register usernames with the servlet container upon service
>> tickets being validated by using the JA-SIG Java CAS client?
>> 
>> EXPLANATION:
>> While digging through out application logs, I came to the point where I am
>> fed up not having users' usernames associated with HTTP requests from Tomcat
>> AccessLogValve.  I realize this is because users are only known to the CAS
>> client and haven't been registered with Tomcat.  After users are logged in,
>> we use a custom JAAS module to provide their principals.  I have started
>> looking harder at Spring Security / ACEGI for authorization, but I wanted to
>> see if anyone else has figured this out.
>> 
>> Thanks,
>> Andrew 

-- 
Andrew R. Feller, Analyst
Information Technology Services
200 Fred Frey Building
Louisiana State University
Baton Rouge, LA 70803
(225) 578-3737 (Office)
(225) 578-6400 (Fax)

_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to