https://issues.apache.org/bugzilla/show_bug.cgi?id=48685

--- Comment #12 from ashish.j...@in.ibm.com 2010-03-22 10:02:23 UTC ---
Hi Mark,

I have modified the patch as you have suggested in your latest update. The new
modified patch includes the following:

1) No dependency on Basic, the applications can use SPNEGO as the auth-method
now in web.xml.
2) No Global property setting required.
3) Removed tabs and extra spaces, if the formatting of the patch still does not
match tomcat standards I will request you to point me to some doc which
explains coding conventions to be used in tomcat.

I was to create a new wiki page for the steps in tomcat but was not sure where
to add the new page. Some guidance on this is expected.

For now I will chalk down the steps here and than same can be added to Tomcat
wiki.

1) Set up the active directory controller as explained in this link
http://cwiki.apache.org/GMOxDOC21/using-spengo-in-geronimo.html#UsingSpengoingeronimo-SettinguptheActiveDirectoryDomainController
2) Set up the client machine as explained in this link
http://cwiki.apache.org/GMOxDOC21/using-spengo-in-geronimo.html#UsingSpengoingeronimo-Settinguptheclientmachine
3) Add the jaas.conf, krb5.ini and krb5.keytab files to the server machine.
4) Add the jars in the zip to tomcat classpath.
5) Set the JAVA_OPTS before starting the server.
6) Start the server and deploy the application.
7) Please make sure your web.xml has correct roles defined and the user which
is being used to authenticate should be memberOf that particular role in Active
Directory Server.
8) On success you should be able to access the resource w/o any prompts for
username and password.


Thanks
Ashish

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to