Re: [8.0.44] NPE when deploying to /manager/text/list with RemoteHostValve

2017-08-08 Thread Martynas Jusevičius
Hmm, strange. I tried "ping jenkins" from shell and it worked. On Tue, 8 Aug 2017 at 04.19, Zemian Deng wrote: > Hi Martynas, you are getting NPE because "request.getRemoteHost()" is > returning null value after you enableLookups! Maybe you have problem > resolving hostname in your env? Try to di

Access to source IP address during authentication and authorization

2017-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, In spite of my (somewhat) recent work on the CredentialHandlers, I haven't been using Tomcat's container-provider authentication and authorization for over a decade. This is because I need access to the user's source IP address for auditing whe

Re: Access to source IP address during authentication and authorization

2017-08-08 Thread i...@flyingfischer.ch
Am 08.08.2017 um 14:05 schrieb Christopher Schultz: > All, > > In spite of my (somewhat) recent work on the CredentialHandlers, I > haven't been using Tomcat's container-provider authentication and > authorization for over a decade. This is because I need access to the > user's source IP address f

Re: Access to source IP address during authentication and authorization

2017-08-08 Thread tomcat
On 08.08.2017 14:21, i...@flyingfischer.ch wrote: Am 08.08.2017 um 14:05 schrieb Christopher Schultz: All, In spite of my (somewhat) recent work on the CredentialHandlers, I haven't been using Tomcat's container-provider authentication and authorization for over a decade. This is because I nee

Re: Access to source IP address during authentication and authorization

2017-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Markus, On 8/8/17 8:21 AM, i...@flyingfischer.ch wrote: > > Am 08.08.2017 um 14:05 schrieb Christopher Schultz: >> All, >> >> In spite of my (somewhat) recent work on the CredentialHandlers, >> I haven't been using Tomcat's container-provider auth

Re: Access to source IP address during authentication and authorization

2017-08-08 Thread Mark Thomas
On 08/08/17 13:44, Christopher Schultz wrote: > I have no problem with Tomcat having access to the IP address. I just > want Tomcat to make that IP address available to the authenticator > component in some way. https://bz.apache.org/bugzilla/show_bug.cgi?id=59750 Implementing that in a way th

Re: Access to source IP address during authentication and authorization

2017-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 8/8/17 8:49 AM, Mark Thomas wrote: > On 08/08/17 13:44, Christopher Schultz wrote: > > > >> I have no problem with Tomcat having access to the IP address. I >> just want Tomcat to make that IP address available to the >> authenticator co

Re: Access to source IP address during authentication and authorization

2017-08-08 Thread Mark Thomas
On 08/08/17 14:01, Christopher Schultz wrote: > Mark, > > On 8/8/17 8:49 AM, Mark Thomas wrote: >> On 08/08/17 13:44, Christopher Schultz wrote: > >> > >>> I have no problem with Tomcat having access to the IP address. I >>> just want Tomcat to make that IP address available to the >>> authenti

Re: Access to source IP address during authentication and authorization

2017-08-08 Thread Zemian Deng
Hi, how about extends the "org.apache.catalina.authenticator.AuthenticatorBase"? or extends "FormAuthenticator" if you are using form based. The base class is actually a Valve, thus provide the "Request" object access. And to use it, just simply add as a valve in your context xml file. If I underst

Re: Access to source IP address during authentication and authorization

2017-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Zemian, On 8/8/17 9:36 AM, Zemian Deng wrote: > Hi, how about extends the > "org.apache.catalina.authenticator.AuthenticatorBase"? or extends > "FormAuthenticator" if you are using form based. The base class is > actually a Valve, thus provide the

Tomcat8 - How to configure ssl certificates for both https and two-way authentication

2017-08-08 Thread dsenthil . in
> Hello, > > I have configured ssl certificates for below requirements: > > 1. Tomcat server certificate configuration in 'server.xml' file to run tomcat > server on port 443 and https > > minSpareThreads="25" >maxSpareThreads="75" enableLookups="false" > disableUploadTimeou

Re: Tomcat8 - How to configure ssl certificates for both https and two-way authentication

2017-08-08 Thread Mark Thomas
On 08/08/17 21:03, dsenthil...@gmail.com wrote: > >> Hello, >> >> I have configured ssl certificates for below requirements: >> >> 1. Tomcat server certificate configuration in 'server.xml' file to run >> tomcat server on port 443 and https >> >> > minSpareThreads="25" >>maxSpare

Re: Tomcat8 - How to configure ssl certificates for both https and two-way authentication

2017-08-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Senthil, On 8/8/17 4:03 PM, dsenthil...@gmail.com wrote: > >> Hello, >> >> I have configured ssl certificates for below requirements: >> >> 1. Tomcat server certificate configuration in 'server.xml' file >> to run tomcat server on port 443 and ht

RE: Problem enabling SSLv3 in Tomcat 8.5.15

2017-08-08 Thread Marc Dorsa
-Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Wednesday, June 21, 2017 2:31 PM To: Tomcat Users List Subject: Re: Problem enabling SSLv3 in Tomcat 8.5.15 On 21/06/17 19:04, Marc Dorsa wrote: >> Hi Tomcat Users, >> >> I am having a difficult time trying to enable