JAAS changes in 5.5.8-alpha

2005-02-21 Thread Jacek Laskowski
Hi, I've just upgraded Geronimo to use Tomcat 5.5.8-alpha and suddenly one of the JAAS test that worked well in 5.5.7 failed. I haven't yet investigated what could break it, thus nothing can I say about the issue. What changed between 5.5.7 and 5.5.8-alpha that could cause a JAAS test

Re: JAAS changes in 5.5.8-alpha

2005-02-21 Thread Remy Maucherat
Jacek Laskowski wrote: Hi, I've just upgraded Geronimo to use Tomcat 5.5.8-alpha and suddenly one of the JAAS test that worked well in 5.5.7 failed. I haven't yet investigated what could break it, thus nothing can I say about the issue. What changed between 5.5.7 and 5.5.8-alpha that could

DO NOT REPLY [Bug 29406] - JAAS Authentication on Tomcat 5

2005-01-22 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://issues.apache.org/bugzilla/show_bug.cgi?id=29406. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.

DO NOT REPLY [Bug 33173] - JAAS Realm Documentation is wrong

2005-01-22 Thread bugzilla
Summary|JAAS Realm Documentation is |JAAS Realm Documentation is |wrong |wrong --- Additional Comments From [EMAIL PROTECTED] 2005-01-22 23:08 --- *** This bug has been marked as a duplicate of 32210 *** -- Configure bugmail: http

DO NOT REPLY [Bug 29406] - JAAS Authentication on Tomcat 5

2005-01-21 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT http://issues.apache.org/bugzilla/show_bug.cgi?id=29406. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.

DO NOT REPLY [Bug 33173] New: - JAAS Realm Documentation is wrong

2005-01-19 Thread bugzilla
/show_bug.cgi?id=33173 Summary: JAAS Realm Documentation is wrong Product: Tomcat 5 Version: 5.0.28 Platform: All URL: http://jakarta.apache.org/tomcat/tomcat-5.0-doc/realm- howto.html#JAASRealm OS/Version: All

Authenticate against realm in web app: JAAS TomcatRealmProxyLoginModule? (WAS: The good way of making JAAS and Realm authentication use the same back-end authentication system?)

2004-10-13 Thread Michael Vorburger
Hi, How do you authenticate uid/pwd against a Tomcat realm, from within a web application? We have a half-baked JMX-based solution; but it is not satisfactory because we would have to move JARs around because of classloader issues. Whether the code in the web app does this authentication JAAS

The good way of making JAAS and Realm authentication use the same back-end authentication system?

2004-10-12 Thread Antoine Brocard - Vertical*i S.A.
Maybe this question should be in the User mailing list, but I think it could interest some Developers... The problem I had to solve is the following: My application needs J2EE container authentication AND JAAS (to authenticates requests coming from an application that don't support standard

RE : The good way of making JAAS and Realm authentication use the same back-end authentication system?

2004-10-12 Thread LERBSCHER Jean-Pierre
 : The good way of making JAAS and Realm authentication use the same back-end authentication system? Maybe this question should be in the User mailing list, but I think it could interest some Developers... The problem I had to solve is the following: My application needs J2EE container

Re: RE : The good way of making JAAS and Realm authentication use the same back-end authentication system?

2004-10-12 Thread Antoine Brocard - Vertical*i S.A.
of making JAAS and Realm authentication use the same back-end authentication system? Maybe this question should be in the User mailing list, but I think it could interest some Developers... The problem I had to solve is the following: My application needs J2EE container authentication AND JAAS

DO NOT REPLY [Bug 30869] - JAAS module name is not allowed in jaas.conf file

2004-09-20 Thread bugzilla
/show_bug.cgi?id=30869 JAAS module name is not allowed in jaas.conf file [EMAIL PROTECTED] changed: What|Removed |Added Status|NEW |RESOLVED

DO NOT REPLY [Bug 30869] - JAAS module name is not allowed in jaas.conf file

2004-08-31 Thread bugzilla
/show_bug.cgi?id=30869 JAAS module name is not allowed in jaas.conf file --- Additional Comments From [EMAIL PROTECTED] 2004-08-31 09:00 --- I'm not sure I can find the code for the barf, because I don't have the Sun source code :-) I think the problem

DO NOT REPLY [Bug 30869] - JAAS module name is not allowed in jaas.conf file

2004-08-30 Thread bugzilla
/show_bug.cgi?id=30869 JAAS module name is not allowed in jaas.conf file --- Additional Comments From [EMAIL PROTECTED] 2004-08-31 00:10 --- Can you point to the class or code in Sun Security that barfs at the leading slash please? Also if you could attach your suggested patch in .diff

DO NOT REPLY [Bug 30869] New: - JAAS module name is not allowed in jaas.conf file

2004-08-26 Thread bugzilla
/show_bug.cgi?id=30869 JAAS module name is not allowed in jaas.conf file Summary: JAAS module name is not allowed in jaas.conf file Product: Tomcat 5 Version: 5.0.27 Platform: All OS/Version: All Status: NEW Severity: Major

DO NOT REPLY [Bug 30869] - JAAS module name is not allowed in jaas.conf file

2004-08-26 Thread bugzilla
/show_bug.cgi?id=30869 JAAS module name is not allowed in jaas.conf file --- Additional Comments From [EMAIL PROTECTED] 2004-08-26 14:59 --- Of course, I meant 'name=name.substring(1)'. - To unsubscribe, e-mail: [EMAIL

DO NOT REPLY [Bug 30768] - Servlet Filter setCharacterEncoding not work and Enable JAAS mechanism

2004-08-23 Thread bugzilla
/show_bug.cgi?id=30768 Servlet Filter setCharacterEncoding not work and Enable JAAS mechanism [EMAIL PROTECTED] changed: What|Removed |Added Status|NEW

DO NOT REPLY [Bug 30768] - Servlet Filter setCharacterEncoding not work and Enable JAAS mechanism

2004-08-20 Thread bugzilla
/show_bug.cgi?id=30768 Servlet Filter setCharacterEncoding not work and Enable JAAS mechanism --- Additional Comments From [EMAIL PROTECTED] 2004-08-20 18:21 --- I can't see anything in the source that would cause this. Please attach your server.xml and web.xml so I can see how things

DO NOT REPLY [Bug 30768] New: - Servlet Filter setCharacterEncoding not work and Enable JAAS mechanism

2004-08-19 Thread bugzilla
/show_bug.cgi?id=30768 Servlet Filter setCharacterEncoding not work and Enable JAAS mechanism Summary: Servlet Filter setCharacterEncoding not work and Enable JAAS mechanism Product: Tomcat 4 Version: 4.1.29 Platform: PC OS/Version

RE : [jaas integration between tomcat/weblogic]

2004-07-29 Thread LERBSCHER Jean-Pierre
any suggestions or no solutions ? -Message d'origine- De : LERBSCHER Jean-Pierre [mailto:[EMAIL PROTECTED] Envoyé : mardi 27 juillet 2004 19:07 À : '[EMAIL PROTECTED]' Objet : [jaas integration between tomcat/weblogic] Hi, I would like to make EJB-calls from Tomcat to EJB

DO NOT REPLY [Bug 29406] - JAAS Authentication on Tomcat 5

2004-07-28 Thread bugzilla
/show_bug.cgi?id=29406 JAAS Authentication on Tomcat 5 [EMAIL PROTECTED] changed: What|Removed |Added Status|NEW |RESOLVED Resolution

[jaas integration between tomcat/weblogic]

2004-07-27 Thread LERBSCHER Jean-Pierre
Hi, I would like to make EJB-calls from Tomcat to EJB in Weblogic in secure environment (using j2ee roles). I configure a custom JAAS Realm that uses client side LoginModule connecting to WLS (weblogic.security.auth.login.UsernamePasswordLoginModule). I put weblogic.jar into common/lib

DO NOT REPLY [Bug 29406] - JAAS Authentication on Tomcat 5

2004-06-16 Thread bugzilla
/show_bug.cgi?id=29406 JAAS Authentication on Tomcat 5 --- Additional Comments From [EMAIL PROTECTED] 2004-06-16 15:45 --- Yes, please attach just a patch. If you do it today I'll try to get it into Tomcat 5.0.27 which will be built tomorrow. Otherwise, it will be the tomcat release after

DO NOT REPLY [Bug 29406] New: - JAAS Authentication on Tomcat 5

2004-06-05 Thread bugzilla
/show_bug.cgi?id=29406 JAAS Authentication on Tomcat 5 Summary: JAAS Authentication on Tomcat 5 Product: Tomcat 5 Version: 5.0.24 Platform: Other OS/Version: Windows XP Status: NEW Severity: Major Priority: Other

DO NOT REPLY [Bug 29406] - JAAS Authentication on Tomcat 5

2004-06-05 Thread bugzilla
/show_bug.cgi?id=29406 JAAS Authentication on Tomcat 5 --- Additional Comments From [EMAIL PROTECTED] 2004-06-05 17:12 --- Created an attachment (id=11771) Tomcat 5 JAASRealm Proposed Changes. - To unsubscribe, e-mail: [EMAIL

DO NOT REPLY [Bug 29406] - JAAS Authentication on Tomcat 5

2004-06-05 Thread bugzilla
/show_bug.cgi?id=29406 JAAS Authentication on Tomcat 5 [EMAIL PROTECTED] changed: What|Removed |Added Severity|Major |Enhancement --- Additional Comments

DO NOT REPLY [Bug 29406] - JAAS Authentication on Tomcat 5

2004-06-05 Thread bugzilla
/show_bug.cgi?id=29406 JAAS Authentication on Tomcat 5 --- Additional Comments From [EMAIL PROTECTED] 2004-06-05 17:41 --- A flag will do. Thank you. Which versions of Tomcat will be impacted by your proposed changed and under what timeline (just for info). Let me know if you want me

JAAS Jar not in server/lib for tomcat 5?

2004-01-15 Thread Shapira, Yoav
Hi, A user just noted that the jaas.jar that was present in server/lib for tomcat 4.1.x is missing in tomcat 5. Is this by design? If so, I'll add a note to the release notes. Or is this a simple mistake? Yoav Shapira Millennium ChemInformatics This e-mail, including any attachments, is

DO NOT REPLY [Bug 23885] - JAAS Realm property misspelling

2003-12-12 Thread bugzilla
/show_bug.cgi?id=23885 JAAS Realm property misspelling [EMAIL PROTECTED] changed: What|Removed |Added Status|NEW |RESOLVED Resolution

Re: Authentication with JAAS / Form Autenthication/ j_security_check

2003-11-27 Thread Andy Armstrong
Jose Antonio Chirinos wrote: Hi, i have a web application that use web authentication through j_security_check servlet; i need to add an extra parameter diferent of j_password and j_username; i guess that i have to put the extra parameter in the login form and in the definition of the realm;

Re: Authentication with JAAS / Form Autenthication/ j_security_check

2003-11-27 Thread Dan Johnsson
i need to add an extra parameter Well, you cannot do this kind of things without extending the code (as you do not stay within the standard servlet security model), so I guess it is a question for the development list after all. Without going into the details of what code to change in what way,

Authentication with JAAS / Form Autenthication/ j_security_check

2003-11-26 Thread Jose Antonio Chirinos
Hi, i have a web application that use web authentication through j_security_check servlet; i need to add an extra parameter diferent of j_password and j_username; i guess that i have to put the extra parameter in the login form and in the definition of the realm; but where i have to include the

DO NOT REPLY [Bug 23885] New: - JAAS Realm property misspelling

2003-10-17 Thread bugzilla
/show_bug.cgi?id=23885 JAAS Realm property misspelling Summary: JAAS Realm property misspelling Product: Tomcat 4 Version: 4.1.27 Platform: All OS/Version: All Status: NEW Severity: Minor Priority: Other Component

Re: JAAS Auth

2003-03-12 Thread Jeanfrancois Arcand
Costin Manolache wrote: Hi, I'm close to get JAAS realm and the memory LoginModule working - if I remember correctly we agreed to make JAAS the default for 5.0 ( I don't remember any objections ). What about authorization :-) Righ now, the Realm implementation includes the 3 authorization

Re: JAAS Auth

2003-03-12 Thread Costin Manolache
Jeanfrancois Arcand wrote: Hi, I'm close to get JAAS realm and the memory LoginModule working - if I remember correctly we agreed to make JAAS the default for 5.0 ( I don't remember any objections ). What about authorization :-) Righ now, the Realm implementation includes the 3 authorization

JAAS Auth

2003-03-11 Thread Costin Manolache
Hi, I'm close to get JAAS realm and the memory LoginModule working - if I remember correctly we agreed to make JAAS the default for 5.0 ( I don't remember any objections ). I never tried it in 4.x - but from the code and code I strongly doubt it works. There is one change I would like to make

RE: JAAS Auth

2003-03-11 Thread Filip Hanik
Just an FYI: In JBoss JAAS doesn't really work as expected, if you log in under a context say mywar | -protected -unprotected then getPrincipal() returns null for the unprotected subcontext(directory), but returns the principal under the secured subcontext. we don't want

Re: JAAS Auth

2003-03-11 Thread David Graff
Costin, Sorry to mail you directly, but this doesn't seem like a major group discussion kind of thing. At work I'm doing a project that has an interesting set of criteria for user authentication that I haven't really seen a way to do with JAAS readily. Basically it boils down to this, a user

RE: JAAS Auth

2003-03-11 Thread Costin Manolache
Filip Hanik wrote: Just an FYI: In JBoss JAAS doesn't really work as expected, if you log in under a context say mywar | -protected -unprotected then getPrincipal() returns null for the unprotected subcontext(directory), but returns the principal under the secured subcontext

JAAS IN TOMCAT 4.0.x

2002-04-09 Thread Williams Mark L DLPC
I've been trying to get JAAS capabilities to work (JDK 1.4.0, Tomcat 4.0.1, 4.0.3, Solaris 8) and am getting odd (and unsatisfactory) results. Is there any reference that identifies if JAAS should work under Tomcat 4.0.x? BTW, I get different behavior between 4.0.1 and 4.0.3 with the same

Where to put JAAS classfiles (loginmodules) when using it from a web app

2002-01-25 Thread Ismael Blesa Part
Hi, I am using JAAS authentication from a web application, the problem is that the login modules that I use, and all the classes that the LoginModule uses are not loaded from the WEB-INF/classes or WEB_INF/lib folder. I have to put them on the jdk/jre/lib/ext. The problem is that the classes

JAAS

2001-12-03 Thread Kalyoncu, Erdal
Hi jakarta-dev-team, I want to know, if Tomcat 4.0 provide JAAS. I read in the J2EE-specification 1.3, that it provide JAAS. The servlet-specification 2.3 provide J2EE-1.3. Tomcat 4.0 provide the servlet-specification 2.3. My question is, if you hava any docs or examples for JAAS in connection

Re: JAAS

2001-12-03 Thread Craig R. McClanahan
On Mon, 3 Dec 2001, Kalyoncu, Erdal wrote: Date: Mon, 3 Dec 2001 11:56:55 +0100 From: Kalyoncu, Erdal [EMAIL PROTECTED] Reply-To: Tomcat Developers List [EMAIL PROTECTED] To: '[EMAIL PROTECTED]' [EMAIL PROTECTED] Subject: JAAS Hi jakarta-dev-team, I want to know, if Tomcat 4.0 provide

Re: Problem with JAAS and TOMCAT 4.0.1

2001-11-30 Thread Ismael Blesa Part
I have already done this, but I have not found a good solution to make it work. I someone that has put it to work could send me his/her configuration it would be a great help. Cheers Antony Bowesman wrote: Ismael Blesa Part wrote: Hi have modified the sample given with JAAS 1.0. I have

Problem with JAAS and TOMCAT 4.0.1

2001-11-29 Thread Ismael Blesa Part
Hi have modified the sample given with JAAS 1.0. I have developed a jsp that calls the sample.java file. This file has been modificated in several ways, the main method has been changed to a method class and some other changes to adapt it to a web application. The problem is that when I try

Re: Problem with JAAS and TOMCAT 4.0.1

2001-11-29 Thread Antony Bowesman
Ismael Blesa Part wrote: Hi have modified the sample given with JAAS 1.0. I have developed a jsp that calls the sample.java file. This file has been modificated in several ways, the main method has been changed to a method class and some other changes to adapt it to a web application

Re: J2EE 1.3/Tomcat/JAAS

2001-11-01 Thread Craig R. McClanahan
On Thu, 1 Nov 2001, Antony Bowesman wrote: Date: Thu, 01 Nov 2001 08:47:07 +0200 From: Antony Bowesman [EMAIL PROTECTED] Reply-To: Tomcat Developers List [EMAIL PROTECTED] To: Tomcat Developers List [EMAIL PROTECTED] Subject: Re: J2EE 1.3/Tomcat/JAAS Craig R. McClanahan wrote

J2EE 1.3/Tomcat/JAAS

2001-10-31 Thread Antony Bowesman
Hi, Is there a target for Tomcat to become a J2EE 1.3 conformant web container? If so, what are the plans for supporting section 6.13 J2EE.6.13 Java™ Authentication and Authorization Service (JAAS) 1.0 Requirements All EJB containers and all web containers must support the use of the JAAS

Re: J2EE 1.3/Tomcat/JAAS

2001-10-31 Thread Craig R. McClanahan
On Wed, 31 Oct 2001, Antony Bowesman wrote: Date: Wed, 31 Oct 2001 10:48:29 +0200 From: Antony Bowesman [EMAIL PROTECTED] Reply-To: Tomcat Developers List [EMAIL PROTECTED] To: TomcatDev [EMAIL PROTECTED] Subject: J2EE 1.3/Tomcat/JAAS Hi, Is there a target for Tomcat to become a J2EE

Re: J2EE 1.3/Tomcat/JAAS

2001-10-31 Thread Antony Bowesman
Craig R. McClanahan wrote: That being said, we have tried to conform to the J2EE 1.3 platform requirements where feasible (such as with the JNDI naming context), and this one (JAAS) looks like a very useful addition. In principle, it will require a Realm implementation that speaks the JAAS

Re: JAAS/Classloaders/Tomcat4

2001-10-24 Thread Antony Bowesman
, e.g. we use log4j in our login module so this has to be on the system classpath too. Should this be put in bin like bootstrap.jar. It's a bit overkill to put it in $JAVA_HOME/jre/lib/ext. Have you tried putting JAAS in the System Extensions directory instead ($JAVA_HOME/jre/lib/ext

JAAS/Classloaders/Tomcat4

2001-10-23 Thread Antony Bowesman
Hi, I've been a bit confused after reading the classloader docs for Tomcat 4, the %CATALINA_HOME/lib %CATALINA_HOME/classes are accessed via the shared classloader but the startup script sets certain jars from %CATALINA_HOME/lib on the system classpath. JAAS 1.0 requires login config and login

Re: JAAS/Classloaders/Tomcat4

2001-10-23 Thread Craig R. McClanahan
On Tue, 23 Oct 2001, Antony Bowesman wrote: Date: Tue, 23 Oct 2001 17:24:56 +0300 From: Antony Bowesman [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: TomcatDev [EMAIL PROTECTED] Subject: JAAS/Classloaders/Tomcat4 Hi, I've been a bit confused after reading the classloader docs

Re: JAAS/Classloaders/Tomcat4

2001-10-23 Thread Andy Armstrong
-To: [EMAIL PROTECTED] To: TomcatDev [EMAIL PROTECTED] Subject: JAAS/Classloaders/Tomcat4 Hi, I've been a bit confused after reading the classloader docs for Tomcat 4, the %CATALINA_HOME/lib %CATALINA_HOME/classes are accessed via the shared classloader but the startup script sets certain

Re: JAAS/Classloaders/Tomcat4

2001-10-23 Thread Craig R. McClanahan
On Tue, 23 Oct 2001, Andy Armstrong wrote: Date: Tue, 23 Oct 2001 18:54:12 +0100 From: Andy Armstrong [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: JAAS/Classloaders/Tomcat4 As a matter of interest are these rules for classpath construction documented

Re: JAAS/Classloaders/Tomcat4

2001-10-23 Thread Andy Armstrong
Thanks Craig Craig R. McClanahan wrote: On Tue, 23 Oct 2001, Andy Armstrong wrote: Date: Tue, 23 Oct 2001 18:54:12 +0100 From: Andy Armstrong [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: JAAS/Classloaders/Tomcat4 As a matter of interest

DO NOT REPLY [Bug 3972] New: - JAAS Realm

2001-10-04 Thread bugzilla
/show_bug.cgi?id=3972 JAAS Realm Summary: JAAS Realm Product: Tomcat 4 Version: 4.0 Final Platform: All OS/Version: All Status: NEW Severity: Enhancement Priority: Other Component: Unknown AssignedTo: [EMAIL

jaas interceptor

2001-09-12 Thread Ron Lin
has anyone ever come across a RequestInterceptor that redirects users to JAAS authentication modules? anyone know information about using JAAS from Tomcat? thanks, Ron Lin Probaris Technologies [EMAIL PROTECTED]

Re: jaas interceptor

2001-09-12 Thread Rickard Öberg
Ron Lin wrote: has anyone ever come across a RequestInterceptor that redirects users to JAAS authentication modules? anyone know information about using JAAS from Tomcat? The JBoss server has a JAAS implementation plugin for Tomcat that does this. See jboss.org for JAAS integration

Plugging realms and JAAS into Tomcat 3.2

2001-03-14 Thread Antony Bowesman
Hi, I am trying to find out if it is possible to plug ones own proprietary user realm into Tomcat 3.2. I have JAAS login modules that authenticate against this user realm and populate the JAAS Subject with principals (user names, groups, roles). However, I need to get this JAAS created

Re: Plugging realms and JAAS into Tomcat 3.2

2001-03-14 Thread cmanolache
a better source :-), it would be a great contribution. Costin On Wed, 14 Mar 2001, Antony Bowesman wrote: Hi, I am trying to find out if it is possible to plug ones own proprietary user realm into Tomcat 3.2. I have JAAS login modules that authenticate against this user realm and populate