RE: LDAP/JNDI Realm Tomcat 5.0 vs 5.5
Okay, I figured out the problem.
My password had some the '$' characters in it. Originally, back in 5.0,
to get this to work, I had to escape the '$' with
another '$'. It looks like this 'problem' has been 'fixed' in 5.5.
So in summary, if you had a 5.0 password of $imple then you had to
use $$imple in you realm definition. But for 5.5 you
just use $imple in your realm definition, as there is no need to
escape the dollar sign.
Hope this helps other who may encounter this problem.
|)ave
-Original Message-
From: David Owens
Sent: Monday, March 21, 2005 10:41 AM
To: 'tomcat-user@jakarta.apache.org'
Subject: LDAP/JNDI Realm Tomcat 5.0 vs 5.5
I am doing some investigation into upgrading from our Tomcat 5.0.x
servers to Tomcat 5.5.x and I am
trying to get everything working. In the old tomcat 5.0.x I was able to
create a realm which authenticated
against our ADS server. However, I cannot get it to work in Tomcat
5.5.7.
The only thing I have changed besides the version of tomcat is the
location of the file containing the
realm information. Originally I had put it in as
$CATALINA_HOME/conf/Catalina/localhost/myapp.xml
but for Tomcat 5.5 I have put the realm information in
webapps/myapp/META-INF/context.xml.
My understanding is that the location/name of the context information
should not change how the
realm works, but I thought it worth mentioning.
Here is the realm definition I used for both Tomcat 5.0.27 and Tomcat
5.5.7
Context ...
Realm className=org.apache.catalina.realm.JNDIRealm
debug=1
connectionURL=ldap://test.testtrust.com:389;
alternateURL=ldap://192.168.0.10:389;
connectionName=CN=ADSAdmin,OU=Service
Accounts,DC=testtrust,DC=com
connectionPassword=secretpassword
contextFactory=com.sun.jndi.ldap.LdapCtxFactory
authentication=simple
referrals=follow
userBase=OU=People,DC=testtrust,DC=com
userRoleName=memberOf
userSubtree=true
userSearch=(samaccountname={0})
roleBase=OU=Groups,DC=testtrust,DC=com
roleName=cn
roleSearch=(member={0})
roleSubtree=true
/
.
.
.
/Context
The error I get when deploying the app is:
SEVERE: Error deploying web application archive myapp.war
java.lang.IllegalStateException: ContainerBase.addChild: start:
LifecycleException: Exception opening directory server connection:
javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308:
LdapErr: DSID-0C09030B, comment: AcceptSecurityContext error, data 52e,
v893 ]
at
org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.ja
va:763)
.
.
.
My understanding is that it is picking up my realm information, and
trying to use it,
but his error means it is not properly authenticating.
So my question is, why did this exact realm setup work under Tomcat
5.0.x and not 5.5.x?
Any help would be greatly appreciated!
Thanks in advance,
Dave
LDAP/JNDI Realm Tomcat 5.0 vs 5.5
I am doing some investigation into upgrading from our Tomcat 5.0.x
servers to Tomcat 5.5.x and I am
trying to get everything working. In the old tomcat 5.0.x I was able to
create a realm which authenticated
against our ADS server. However, I cannot get it to work in Tomcat
5.5.7.
The only thing I have changed besides the version of tomcat is the
location of the file containing the
realm information. Originally I had put it in as
$CATALINA_HOME/conf/Catalina/localhost/myapp.xml
but for Tomcat 5.5 I have put the realm information in
webapps/myapp/META-INF/context.xml.
My understanding is that the location/name of the context information
should not change how the
realm works, but I thought it worth mentioning.
Here is the realm definition I used for both Tomcat 5.0.27 and Tomcat
5.5.7
Context ...
Realm className=org.apache.catalina.realm.JNDIRealm
debug=1
connectionURL=ldap://test.testtrust.com:389;
alternateURL=ldap://192.168.0.10:389;
connectionName=CN=ADSAdmin,OU=Service
Accounts,DC=testtrust,DC=com
connectionPassword=secretpassword
contextFactory=com.sun.jndi.ldap.LdapCtxFactory
authentication=simple
referrals=follow
userBase=OU=People,DC=testtrust,DC=com
userRoleName=memberOf
userSubtree=true
userSearch=(samaccountname={0})
roleBase=OU=Groups,DC=testtrust,DC=com
roleName=cn
roleSearch=(member={0})
roleSubtree=true
/
.
.
.
/Context
The error I get when deploying the app is:
SEVERE: Error deploying web application archive myapp.war
java.lang.IllegalStateException: ContainerBase.addChild: start:
LifecycleException: Exception opening directory server connection:
javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308:
LdapErr: DSID-0C09030B, comment: AcceptSecurityContext error, data 52e,
v893 ]
at
org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.ja
va:763)
.
.
.
My understanding is that it is picking up my realm information, and
trying to use it,
but his error means it is not properly authenticating.
So my question is, why did this exact realm setup work under Tomcat
5.0.x and not 5.5.x?
Any help would be greatly appreciated!
Thanks in advance,
Dave
RE: 5.0 vs 5.5
Might as well go to 5.5.4 as it is stable and the way forwards. Management of the 2 is very similar. Ta Matt -Original Message- From: Dola Woolfe [mailto:[EMAIL PROTECTED] Sent: 13 December 2004 15:20 To: Tom Cat Subject: 5.0 vs 5.5 So I decided to upgrade my Tomcat (and go with the standalone). Should I go with 5.0 or 5.5? I heard that 5.5 is not quite stable but I'm worried that I will spend time learning how to manage 5.0 and then in a couple months I will have to relearn 5.5; Are there many differences in management? As a little more infor, web application runs on the intranet and has an audience of about 15 people. There's virtually no volume and I'm sure that my servlets and jsp pages are quite naive and don't do anything advanced... Thanks __ Do you Yahoo!? Yahoo! Mail - Helps protect you from nasty viruses. http://promotions.yahoo.com/new_mail - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Any opinions expressed in this E-mail may be those of the individual and not necessarily the company. This E-mail and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient or the person responsible for delivering to the intended recipient, be advised that you have received this E-mail in error and that any use or copying is strictly prohibited. If you have received this E-mail in error please notify the beCogent postmaster at [EMAIL PROTECTED] Unless expressly stated, opinions in this email are those of the individual sender and not beCogent Ltd. You must take full responsibility for virus checking this email and any attachments. Please note that the content of this email or any of its attachments may contain data that falls within the scope of the Data Protection Acts and that you must ensure that any handling or processing of such data by you is fully compliant with the terms and provisions of the Data Protection Act 1984 and 1998. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: 5.0 vs 5.5
Should I go with 5.0 or 5.5? I'd go with 5.5. Are there many differences in management? Logging has changed, the manager app is no longer shipped as part of the core install. On Mon, 2004-12-13 at 10:19, Dola Woolfe wrote: So I decided to upgrade my Tomcat (and go with the standalone). Should I go with 5.0 or 5.5? I heard that 5.5 is not quite stable but I'm worried that I will spend time learning how to manage 5.0 and then in a couple months I will have to relearn 5.5; Are there many differences in management? As a little more infor, web application runs on the intranet and has an audience of about 15 people. There's virtually no volume and I'm sure that my servlets and jsp pages are quite naive and don't do anything advanced... Thanks __ Do you Yahoo!? Yahoo! Mail - Helps protect you from nasty viruses. http://promotions.yahoo.com/new_mail - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: 5.0 vs 5.5
Hi, Are there many differences in management? Logging has changed, the manager app is no longer shipped as part of the core install. Manager IS still shipped, admin isn't. Yoav Shapira http://www.yoavshapira.com This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged. This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else. If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender. Thank you. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: 5.0 vs 5.5
Can anyone tell me how can i install tomcat 5.5 with admin i have downloaded both the sources but don't know how to integrate the code what i did was looked upon the tomcat 4.2.30 and copied the folder in same structure can anyone guide me to reference document for the same .. thanks Birendar Singh Waldiya Dale, Matt [EMAIL PROTECTED] 12/13/2004 08:52 PM Please respond to Tomcat Users List [EMAIL PROTECTED] To Tomcat Users List [EMAIL PROTECTED] cc Subject RE: 5.0 vs 5.5 Might as well go to 5.5.4 as it is stable and the way forwards. Management of the 2 is very similar. Ta Matt -Original Message- From: Dola Woolfe [mailto:[EMAIL PROTECTED] Sent: 13 December 2004 15:20 To: Tom Cat Subject: 5.0 vs 5.5 So I decided to upgrade my Tomcat (and go with the standalone). Should I go with 5.0 or 5.5? I heard that 5.5 is not quite stable but I'm worried that I will spend time learning how to manage 5.0 and then in a couple months I will have to relearn 5.5; Are there many differences in management? As a little more infor, web application runs on the intranet and has an audience of about 15 people. There's virtually no volume and I'm sure that my servlets and jsp pages are quite naive and don't do anything advanced... Thanks __ Do you Yahoo!? Yahoo! Mail - Helps protect you from nasty viruses. http://promotions.yahoo.com/new_mail - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] ForwardSourceID:NT69C2 DISCLAIMER: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited and any violation thereof would possibly attract penal action. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. TCS accepts no liability for any damage caused by this email or its attachments due to viruses, interference, interception, corruption or unauthorized access/use. Any opinions expressed in this E-mail may be those of the individual and not necessarily the company. This E-mail and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient or the person responsible for delivering to the intended recipient, be advised that you have received this E-mail in error and that any use or copying is strictly prohibited. If you have received this E-mail in error please notify the beCogent postmaster at [EMAIL PROTECTED] Unless expressly stated, opinions in this email are those of the individual sender and not beCogent Ltd. You must take full responsibility for virus checking this email and any attachments. Please note that the content of this email or any of its attachments may contain data that falls within the scope of the Data Protection Acts and that you must ensure that any handling or processing of such data by you is fully compliant with the terms and provisions of the Data Protection Act 1984 and 1998. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
5.0 vs 5.5
So I decided to upgrade my Tomcat (and go with the standalone). Should I go with 5.0 or 5.5? I heard that 5.5 is not quite stable but I'm worried that I will spend time learning how to manage 5.0 and then in a couple months I will have to relearn 5.5; Are there many differences in management? As a little more infor, web application runs on the intranet and has an audience of about 15 people. There's virtually no volume and I'm sure that my servlets and jsp pages are quite naive and don't do anything advanced... Thanks __ Do you Yahoo!? Yahoo! Mail - Helps protect you from nasty viruses. http://promotions.yahoo.com/new_mail - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: 5.0 vs 5.5
Doh!!! That's what I meant to say. On Mon, 2004-12-13 at 10:36, Shapira, Yoav wrote: Hi, Are there many differences in management? Logging has changed, the manager app is no longer shipped as part of the core install. Manager IS still shipped, admin isn't. Yoav Shapira http://www.yoavshapira.com This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged. This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else. If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender. Thank you. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
