On Sep 25, 2009, at 10:08 AM, Gavin Gray wrote:
> Hi there,
>
> I have some queries about how to configure the validation
> location for JavaCosignV3 and IIS 7 cosignmodule3.0
>
> 1. For both these filters, it seems you need to physically create the
> directory stucture cosign/valid before the filter will work. Is that
> correct?
>
The IIS 7 cosignmodule does not need a /cosign/valid directory
structure to exist. The JavaCosign needs it sometimes. The best
method for determining if it is necessary for the JavaCosign filter is
trial and error. Some JavaCosign users have found it necessary, some
have not.
> 2. For both these filters you need to set the cosign filter as a
> handler for requests for the location cosign/valid. However you need
> to switch cosign protection off for the location cosign/valid. Is that
> correct?
>
> 3. If you want to protect an entire web site how do you configure
> cosign protection on for the entire site but off for cosign/valid?
> This question applies to the JavaCosign Filter.
>
I believe the javacosign filter behaves slightly differently (than the
IIS and Apache filters) in this regard. Whatever the
"LocationHandlerRef" in the CosignConfig.xml is configured to be will
determine what the JavaCosign filter uses to determine if a location
is a cosign validation URL. The common practice, of course, is to set
the validation url, or LocationHandlerRef, as "/cosign/valid".
To protect an entire site with cosign, it looks like you can use a
filter mapping in the web.xml file such as:
<filter-mapping>
<filter-name>Cosign Authentication Filter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
This will tell the web server to send all requests through cosign.
The other half is to then tell cosign that all paths on the web server
are cosign-protected. In the CosignConfig.xml, you will need:
<service name="cosign-tomcatserver.example.edu">
<protected>/</protected>
...
</service>
Jarod
> many thanks,
>
> Gavin.
>
>
> --
> Gavin Gray
> Edinburgh University Information Services
> Rm 2013 JCMB
> Kings Buildings
> Edinburgh
> EH9 3JZ
> UK
> tel +44 (0)131 650 5987
> email [email protected]
>
> --
> The University of Edinburgh is a charitable body, registered in
> Scotland, with registration number SC005336.
>
> --
> The University of Edinburgh is a charitable body, registered in
> Scotland, with registration number SC005336.
>
>
>
> ------------------------------------------------------------------------------
> Come build with us! The BlackBerry® Developer Conference in SF, CA
> is the only developer event you need to attend this year. Jumpstart
> your
> developing skills, take BlackBerry mobile applications to market and
> stay
> ahead of the curve. Join us from November 9-12, 2009. Register
> now!
> http://p.sf.net/sfu/devconf
> _______________________________________________
> Cosign-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/cosign-discuss
>
>
------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
_______________________________________________
Cosign-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/cosign-discuss
