Author: kfujino
Date: Tue Dec 16 08:06:04 2014
New Revision: 1645875
URL: http://svn.apache.org/r1645875
Log:
Add document of ClusterSingleSignOn.
Modified:
tomcat/tc8.0.x/trunk/webapps/docs/changelog.xml
tomcat/tc8.0.x/trunk/webapps/docs/config/cluster-valve.xml
Modified: tomcat/tc8.0.x/trunk/webapps/docs/changelog.xml
URL:
http://svn.apache.org/viewvc/tomcat/tc8.0.x/trunk/webapps/docs/changelog.xml?rev=1645875&r1=1645874&r2=1645875&view=diff
==============================================================================
--- tomcat/tc8.0.x/trunk/webapps/docs/changelog.xml (original)
+++ tomcat/tc8.0.x/trunk/webapps/docs/changelog.xml Tue Dec 16 08:06:04 2014
@@ -320,6 +320,9 @@
<bug>57323</bug>: Correct display of outdated sessions in sessions
count listing in Manager application. (kkolinko)
</fix>
+ <add>
+ Add document of <code>ClusterSingleSignOn</code>. (kfujino)
+ </add>
</changelog>
</subsection>
<subsection name="Other">
Modified: tomcat/tc8.0.x/trunk/webapps/docs/config/cluster-valve.xml
URL:
http://svn.apache.org/viewvc/tomcat/tc8.0.x/trunk/webapps/docs/config/cluster-valve.xml?rev=1645875&r1=1645874&r2=1645875&view=diff
==============================================================================
--- tomcat/tc8.0.x/trunk/webapps/docs/config/cluster-valve.xml (original)
+++ tomcat/tc8.0.x/trunk/webapps/docs/config/cluster-valve.xml Tue Dec 16
08:06:04 2014
@@ -104,6 +104,39 @@
</subsection>
</section>
+<section name="org.apache.catalina.ha.authenticator.ClusterSingleSignOn">
+ The <code>ClusterSingleSignOn</code> supports feature of single sign on in
cluster.
+ By using <code>ClusterSingleSignOn</code>, the security identity
authenticated
+ by one web application is recognized by other web applications on the same
virtual host,
+ and it is propagated to other nodes in the cluster.
+
+ <p>See the <a href="host.html#Single_Sign_On">Single Sign On</a> special
+ feature on the <strong>Host</strong> element for more information.</p>
+
+ <p><strong>Note: </strong>ClusterSingleSignOn can be configured at host
level cluster only.
+ </p>
+
+ <subsection name="Attributes">
+ <attributes>
+ <attribute name="className" required="true">
+ <p>Java class name of the implementation to use. This MUST be set to
+
<strong>org.apache.catalina.ha.authenticator.ClusterSingleSignOn</strong>.</p>
+ </attribute>
+ <attribute name="requireReauthentication" required="false">
+ <p>Default false. Flag to determine whether each request needs to be
+ reauthenticated to the security <strong>Realm</strong>. If "true", this
+ Valve uses cached security credentials (username and password) to
+ reauthenticate to the <strong>Realm</strong> each request associated
+ with an SSO session. If "false", the Valve can itself authenticate
+ requests based on the presence of a valid SSO cookie, without
+ rechecking with the <strong>Realm</strong>.</p>
+ </attribute>
+ <attribute name="cookieDomain" required="false">
+ <p>Sets the host domain to be used for sso cookies.</p>
+ </attribute>
+ </attributes>
+ </subsection>
+</section>
</body>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
