Re: HTTP AUTH

2004-05-26 Thread Bill Barker
SH Solutions [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi Can you explain yourself here? It is not obvious to me. How does the number of users make any difference here. Just set up BASIC Auth in web.xml. You don't have to define your users and roles in web.xml, if

Re: HTTP AUTH

2004-05-26 Thread Jacob Kjome
Of course he can also just use BASIC Auth and do request.getRemoteUser() and do whatever he wants with that. No realms needed there. The original question was why was he setting up BASIC Auth programatically when he can specify it in web.xml. It sounds like he uses some custom authentication

HTTP AUTH

2004-05-25 Thread SH Solutions
Hi I managed to set up HTTP BASIC AUTH using the following: HttpServletResponse response = request.getResponse(); response.setStatus( 401 ); response.setHeader( WWW-Authenticate, BASIC realm=\realm\ ); Now I want to go a step further and implement certificate authentification.

RE: HTTP AUTH

2004-05-25 Thread Mark Thomas
How about use web.xml to configure your security rather than doing it by hand? That way tomcat does all the hard work. Mark -Original Message- From: SH Solutions [mailto:[EMAIL PROTECTED] Sent: Tuesday, May 25, 2004 10:37 PM To: 'Tomcat Users List' Subject: HTTP AUTH Hi I

RE: HTTP AUTH

2004-05-25 Thread SH Solutions
Hi How about use web.xml to configure your security rather than doing it by hand? That way tomcat does all the hard work. We have a complex CMS system with about 35000 users. We obviously do NOT want to use web.xml. Regards, Steffen

RE: HTTP AUTH

2004-05-25 Thread Jacob Kjome
At 11:58 PM 5/25/2004 +0200, you wrote: Hi How about use web.xml to configure your security rather than doing it by hand? That way tomcat does all the hard work. We have a complex CMS system with about 35000 users. We obviously do NOT want to use web.xml. Can you explain yourself here? It is

RE: HTTP AUTH

2004-05-25 Thread SH Solutions
Hi Can you explain yourself here? It is not obvious to me. How does the number of users make any difference here. Just set up BASIC Auth in web.xml. You don't have to define your users and roles in web.xml, if that's what you are implying. Alright, that is what I was thinking. So, is it

webdav over SSL with http-auth?

2002-03-11 Thread Aditya
/faq/view.jsp?EID=544213 Unfortunately, Tomcat doesn't seem to be requiring the webdav client to present the http auth login prompt. I've tried logging in as: https://username:password@server/context and that seems not to make a difference. If I try to PUT a file (this is with the cadaver client

Re: webdav over SSL with http-auth?

2002-03-11 Thread Aditya
(I've tried it without auth-constraints and it works as expected). I've followed the basic template offered at: http://www.jguru.com/faq/view.jsp?EID=544213 Unfortunately, Tomcat doesn't seem to be requiring the webdav client to present the http auth login prompt. I've tried logging

Authorisation using basic http auth. under tomcat with apache and mod_jk?

2001-04-23 Thread Roberts Huw
Hi all, I am having a problem with the response to request.getRemoteUser() returning null. I'm using tomcat 3_3-m1 and I'm pretty sure I've got mod_jk.conf and httpd.conf set up okay. Apache knows (the evidence is in access_log) that the user is set up and authorised, but in my servlet,