Re: mod_auth_kerb / mod_spnego on Windows
On Sat, Jun 27, 2009 at 10:04 AM, André Warniera...@ice-sa.com wrote: Maciej Matecki wrote: ... Do You have any compiled module for Apache which provide Kerberos authorization under Windows and Apache 2.x? Hi. Just a question : is there any mechanism that allows you to do that from Tomcat ? Because if there is, then I can provide you with a trick to use this for Apache also. I such a trick myself, unfortunately not with Kerberos but with NTLM. Hi, Yes. I just need to find in headers the name of user authorized with Kerberos (I use the preauth filter in Spring Security). So if you've got any good method to achieve that I'll be very thankful. Regards, -- Maciej Matecki skype: m.matecki || www: http://matecki.info/ - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: mod_auth_kerb / mod_spnego on Windows
On Sun, Jun 28, 2009 at 4:12 PM, André Warniera...@ice-sa.com wrote: Maciej Matecki wrote: On Sat, Jun 27, 2009 at 10:04 AM, André Warniera...@ice-sa.com wrote: Maciej Matecki wrote: ... Do You have any compiled module for Apache which provide Kerberos authorization under Windows and Apache 2.x? Hi. Just a question : is there any mechanism that allows you to do that from Tomcat ? Because if there is, then I can provide you with a trick to use this for Apache also. I such a trick myself, unfortunately not with Kerberos but with NTLM. Hi, Yes. I just need to find in headers the name of user authorized with Kerberos (I use the preauth filter in Spring Security). So if you've got any good method to achieve that I'll be very thankful. Regards, Allright, here is the trick. Depending on your circumstances, this may or may not be difficult. I developed this method for a practical reason, probably the same as you have found out : there are some forms of authentication that are easier to do under Apache on some platforms, others that are easier to do under Tomcat on some platforms. This allows me to choose. [cut] Hmmm it looks quite interesting but in my case I don't see the chance to write module for Kerberos on my own. There are already such modules (mod_auth_kerb - http://modauthkerb.sourceforge.net/ and mod_spnego - https://sourceforge.net/project/showfiles.php?group_id=82781package_id=93313). Unfortunately there's no compiled version and I have the big problem to compile it. So I ask again maybe somebody have that modules compiled for Windows? Thank you for your trick, I hope it'll be helpful for somebody else. Regards, -- Maciej Matecki skype: m.matecki || www: http://matecki.info/ - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: REMOTE_USER with Apache 2.2.9 (Debian) + Tomcat 6.0.18 + mod_auth_kerb
On Sun, Jun 28, 2009 at 5:31 AM, Christopher Schultzch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Maciej On 6/24/2009 10:15 AM, Maciej Matecki wrote: I've got the big problem with forward REMOTE_HOST from Apache to Tomcat. On the Apache side everything works ok. I've tested it with PHP script and it simply works. But on the Tomcat side REMOTE_USER header value is not available. [snip] What I've already done is testing for many different ways: 1) rewriting: http://osdir.com/ml/apache.mod-auth-kerb.general/2005-10/msg9.html 2) tomcatAuthentication set to false Which connector are you using? AJP or HTTP? If AJP, are you using mod_proxy_ajp or mod_jk? [cut] I use mod_jk. Thank you for your suggestions. Finally I set in Apache: JkEnvVar REMOTE_USER and in my preauth filter I can get the user by: httpServletRequest.getAttribute(REMOTE_USER); Actually I've got much more bigger problem I can't get compiled module for kerberos with Apache on Windows :( Regards, -- Maciej Matecki skype: m.matecki || www: http://matecki.info/ - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: REMOTE_USER with Apache 2.2.9 (Debian) + Tomcat 6.0.18 + mod_auth_kerb
On Mon, Jun 29, 2009 at 1:28 AM, André Warniera...@ice-sa.com wrote: Maciej Matecki wrote: Actually I've got much more bigger problem I can't get compiled module for kerberos with Apache on Windows :( Can I ask again : why do you need to authenticate /under Apache/ with Kerberos ? Is it just to pass the user-id to Tomcat ? Or do you also need it at the Apache level for something ? I just need to pass the user-id to Tomcat. Regards, -- Maciej Matecki skype: m.matecki || www: http://matecki.info/ - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
mod_auth_kerb / mod_spnego on Windows
Hello, I have to run Kerberos with Apache + Tomcat on Windows. I tested everything in Linux and there everything works just great. I thought that there won't be any problems in Windows... I was wrong... :( Do You have any compiled module for Apache which provide Kerberos authorization under Windows and Apache 2.x? I've downloaded sources of mod_spnego but unfortunetly I've got the big problem to compile it. Thank you in advance. Best regards, -- Maciej Matecki skype: m.matecki || www: http://matecki.info/ - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
REMOTE_USER with Apache 2.2.9 (Debian) + Tomcat 6.0.18 + mod_auth_kerb
Hello, That's my first post for users@tomcat.apache.org list so I'd like to say hello to everybody. I've got the big problem with forward REMOTE_HOST from Apache to Tomcat. On the Apache side everything works ok. I've tested it with PHP script and it simply works. But on the Tomcat side REMOTE_USER header value is not available. I spend almost all day today to solve it. I've read a lot of articles and it still doesn't work. Please help me :) What I've already done is testing for many different ways: 1) rewriting: http://osdir.com/ml/apache.mod-auth-kerb.general/2005-10/msg9.html 2) tomcatAuthentication set to false I also try that in Tomcat 5 and there I had also problem. If I use JkEnvVar REMOTE_HOST I've got attribute available on the Tomcat side, but I need that value in header (I want to use RequestHeaderPreAuthenticatedProcessingFilter from Spring Security). Any advices? Thank you in advance. Best regards, -- Maciej Matecki skype: m.matecki || www: http://matecki.info/ - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Issue with Tomcat 6 on Windows Server 2003 x64
On Wed, Jun 24, 2009 at 4:45 PM, abmo...@aol.com wrote: Hi Tomcat Users, I am trying to configure Tomcat 6.0.20 on Windows Server 2003 x64 and find that the installed service abruptly stops during startup. The following errors are logged. [2009-06-23 14:49:46] [info] Procrun (2.0.4.0) started [2009-06-23 14:49:46] [info] Running Service... [2009-06-23 14:49:46] [info] Starting service... [2009-06-23 14:49:46] [174? javajni.c] [error] %1 is not a valid Win32 application. [2009-06-23 14:49:46] [994? prunsrv.c] [error] Failed creating java D:\Java\jdk1.6.0_14\jre\bin\server\jvm.dll [2009-06-23 14:49:46] [1269 prunsrv.c] [error] ServiceStart returned 1 [2009-06-23 14:49:46] [info] Run service finished. [2009-06-23 14:49:46] [info] Procrun finished. [2009-06-23 15:07:48] [info] Procrun (2.0.5.0) started [2009-06-23 15:07:48] [info] Running Service... [2009-06-23 15:07:48] [info] Starting service... [2009-06-23 15:07:49] [info] Service started in 1218 ms. Hello, I had the same issue sometime ago. I had to copy Program Files\Java\jre1.6.0\bin\msvcr71.dll file to Windows\system32 directory. Maybe it'll works for you? Regards, -- Maciej Matecki skype: m.matecki || www: http://matecki.info/ - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
Re: Issue with Tomcat 6 on Windows Server 2003 x64
On Wed, Jun 24, 2009 at 5:28 PM, Caldarale, Charles Rchuck.caldar...@unisys.com wrote: From: Maciej Matecki [mailto:mmate...@gmail.com] Subject: Re: Issue with Tomcat 6 on Windows Server 2003 x64 I had the same issue sometime ago. I had to copy Program Files\Java\jre1.6.0\bin\msvcr71.dll file to Windows\system32 directory. Do NOT do that on a 64-bit version of Windows. That's a 32-bit library and cannot be used with a 64-bit launcher and JVM. - Chuck I did it on 32-bit OS. I didn't know that it's wrong for 64-bit. So Abdul maybe you'll check that another solution from Charles? Regards, -- Maciej Matecki skype: m.matecki || www: http://matecki.info/ - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
