Single Sign-On across multiple webapps

[A Sunley]

Greeting Tomcat gurus,

I'm experiencing some problems implementing SSO across two webapps.
Basically we have a main website which presently uses FORM authentication
with a JAASRealm – this works fine for the website. However we now want to
add a forum, specifically JForum ( www.jforum.net ) as it supports SSO.
Ideally we want to install it as a separate webapp.

By default JForum supports SSO by calling request.getRemoteUser(). But if
the user is authenticated in the first webapp.

For the main website we have context.xml in website/META-INF/, with
crossContext enabled and the JAASRealm specified. A quick note about the
JAAS setup, I don't know whether this has any implications regarding SSO - 
The JAASRealm has useContextClassLoader set to false, therefore the
LoginModule is a class of the website, not a .jar in the Tomcat shared
library.

With crossContext enabled in the main webapp, calling getRemoteUser() in the
jforum webapp returns null and I'm not sure why. 

Essentially my question is how do I enable cross-context sessions?  Indeed,
if I set a session attribute in one webapp, how do I access it in from
another webapp period? 

Is this the way to do it:

Set attribute in webapp1:
request.getSession().getServletContext().getContext(/webapp2).setAttribute(test,
Hello); 

Access attribute in webapp2:
request.getSession().getServletContext().getContext(/webapp2).getAttribute(test);

Thanks for your time.
Alan.

-- 
View this message in context: 
http://www.nabble.com/Single-Sign-On-across-multiple-webapps-tf4505100.html#a12848283
Sent from the Tomcat - User mailing list archive at Nabble.com.


-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: Single Sign-On across multiple webapps

[Caldarale, Charles R]

 From: A Sunley [mailto:[EMAIL PROTECTED] 
 Subject: Single Sign-On across multiple webapps
 
 I'm experiencing some problems implementing SSO across two webapps.

You make no mention of having read the Tomcat documentation for SSO, let
alone enabling it:
http://tomcat.apache.org/tomcat-6.0-doc/config/host.html#Single%20Sign%2
0On

(Adjust the above for whatever version of Tomcat you're using, which you
didn't bother to mention.)

Does that help resolve your problem?

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]