Re: Configuring tomcat to log authentication events

2008-11-12 Thread Rainer Jung
Brian Gillan schrieb:
 We're using Rational Team Concert with Tomcat and authenticating with 
 LDAP. 
 I want to log authentication events for users accessing RTC so we can see 
 who's authenticating, and if unsuccessfully, who they're trying to 
 authenticate as. Is this just a matter of configuration? I did some poking 
 
 around the Tomcat documentation but nothing jumped out. 

If you are using Tomcat 6 and JULI logging (default), add

org.apache.catalina.realm.level = FINEST
org.apache.catalina.authenticator.level = FINEST

to your $CATALINA_BASE/conf/logging.properties.

Be aware of the wrong No role found message though:

http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/catalina/realm/RealmBase.java?r1=645149r2=698982sortby=datediff_format=h

This will be fixed in 6.0.19.

We are in the process of adding features to the JNDI Realm.

Regards,

Rainer

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Configuring tomcat to log authentication events

2008-11-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Brian,

Brian Gillan wrote:
 We're using Rational Team Concert with Tomcat and authenticating with 
 LDAP. 
 I want to log authentication events for users accessing RTC so we can see 
 who's authenticating, and if unsuccessfully, who they're trying to 
 authenticate as. Is this just a matter of configuration? I did some poking 
 around the Tomcat documentation but nothing jumped out. 

I would recommend browsing the code for the LDAP authentication class.
It's possible that there is some DEBUG logging that you could enable for
that class and redirect to a file, but if you really want to get
authentication event notification, I'm sure it's not in there.

If you want to completely control what happens during authentication,
you might want to look into using securityfilter
(http://securityfilter.sourceforge.net/), which allows you to completely
customize the authentication code while remaining (app server)
vendor-neutral.

- -chris
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkkZ99UACgkQ9CaO5/Lv0PAWOACgppnbQw+Xbixnc7lB/5GbSR7f
1h0An1rancIrBxq5ovh7y8A7D+R/AHdk
=tUJ4
-END PGP SIGNATURE-

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Configuring tomcat to log authentication events

2008-11-10 Thread Brian Gillan
We're using Rational Team Concert with Tomcat and authenticating with 
LDAP. 
I want to log authentication events for users accessing RTC so we can see 
who's authenticating, and if unsuccessfully, who they're trying to 
authenticate as. Is this just a matter of configuration? I did some poking 

around the Tomcat documentation but nothing jumped out. 

Thanks, Brian 

Phone: (919) 224-1445 Tie-line: 8-687-1445
GILLAN AT RALVM13 / [EMAIL PROTECTED]
Tivoli Distributed Build Services 
(http://oob.tivlab.raleigh.ibm.com/index.shtml)
Dept. E45A Bld. 510
RTP, NC