Timeout or log out for Realm authentication

[Joan Jesús Pujol Espinar]

Hello,

Is it possible to set a timeout or manually logout a user that is 
authenticated with a realm?
Because the user is always 'logged' until the navigator is closed.

Cheers,

--
***
Joan Jesús Pujol Espinar
Tècnic de Sistemes
Universitat de Girona
Dpt. Informàtica i Matemàtica Aplicada
Campus Montilivi
17003 - Girona (Spain)
e-mail: [EMAIL PROTECTED]
+34 972 418418 Fax: +34 972 418792
***


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Enabling logging for a Realm

[Joan Jesús Pujol Espinar]

Hi,

I have authentication problems with the JAAS Realm. I downloaded the 
tomcat 5 sourcecode and in the JASSRealm.java there is some debug 
information  like this:
if( log.isDebugEnabled())
   log.debug(Authenticating  + appName +   +  username);

But I can't see this info in any log. I have set the verbosity of all 
logguers to 4 and I also set debug level to 4 in the Engine and the 
Realm. But I can't see this info.

Cheers,
--
***
Joan Jesús Pujol Espinar
Tècnic de Sistemes
Universitat de Girona
Dpt. Informàtica i Matemàtica Aplicada
Campus Montilivi
17003 - Girona (Spain)
e-mail: [EMAIL PROTECTED]
+34 972 418418 Fax: +34 972 418792
***


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Using JAASRealm to authentificate with a NIS

[Joan Jesús Pujol Espinar]

Hello,

I need to use BASIC authentification but with a NIS. I try to do it with
the JAASRealm. It's the correct solution?
What I do is:

-1-
Add the Realm in the server.xml
 Realm className=org.apache.catalina.realm.JAASRealm
userClassNames=com.sun.security.auth.UnixPrincipal
roleClassNames=com.sun.security.auth.UnixNumericGroupPrincipal
appName=UsuarisReal debug=99/
-2-
Export the enviorement variable JAVA_OPTS with
-Djava.security.auth.login.config==/usr/local/jakarta-tomcat-4.1.12//conf/UsuarisRealm.conf 



-3-
And the Configuration file UsuarisRealm is:
UsuarisRealm {
   com.sun.security.auth.JndiLoginModule required debug=true
user.provider.url=nis://cosmos.udg.es/ima.udg.es/user
group.provider.url=nis://cosmos.udg.es/ima.udg.es/syste
m/group;
}
-4-
Add a security-constraint in a context of an application:
 security-constraint
   web-resource-collection
   web-resource-name Prova area autentificada
/web-resource-name
   url-pattern/*/url-pattern
   http-method DELETE /http-method
   http-method GET /http-method
   http-method PUT /http-method
   http-method POST /http-method
   /web-resource-collection
   auth-constraint
   role-name208/role-name
   /auth-constraint
   login-config
   auth-method BASIC /auth-method
   realm-nameAutentificacio usuaris /realm-name
   /login-config
   security-role
   role-name208/role-name
   /security-role
 /security-constraint
But this doesn't work.  The error that I recive is  Error 500: Config
Error: It isn't possible to do control acces with an authentificated
principal (translated from spanish)
What I do wrong?

And  it's possible that in the log there isn't any information about
Realm with a debug=99?
Cheers,

PD: Excusme for my english level



--
***
Joan Jesús Pujol Espinar
Tècnic de Sistemes
Universitat de Girona
Dpt. Informàtica i Matemàtica Aplicada
Campus Montilivi
17003 - Girona (Spain)
e-mail: [EMAIL PROTECTED]
+34 972 418418 Fax: +34 972 418792
***


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]