RE: User authentication using Realms

2005-06-21 Thread Gagnon, Joseph M \(US SSA\)
of no help at all. What good is it, if it does not help those who use it? Thanks, Joe -Original Message- From: Frank W. Zammetti [mailto:[EMAIL PROTECTED] Sent: Monday, June 20, 2005 9:58 AM To: Tomcat Users List Cc: Tomcat Users List Subject: Re: User authentication using Realms Glad

Re: User authentication using Realms

2005-06-20 Thread Frank W. Zammetti
non, Joseph M \(US SSA\) said: > I've finally (with lots of help) figured out how to do form-based user > authentication of a simple test JSP webapp. So far, so good ... it > seems to be working. > > However, the "database" is a list of roles and users currently defined

User authentication using Realms

2005-06-20 Thread Gagnon, Joseph M \(US SSA\)
I've finally (with lots of help) figured out how to do form-based user authentication of a simple test JSP webapp. So far, so good ... it seems to be working. However, the "database" is a list of roles and users currently defined in conf/tomcat-users.xml. While this worked f

User Authentication For Download Page

2004-11-28 Thread Damjan Majstorovic
Hi all, I offer download of a file on my site. It sends content using ServletOuputStream. This is the command that I exectly want to constraint with Tomcat's security mechanism (I use JDBC Realm). After user clicks on download, s/he gets forwarded to login. After login the File Download popup a

RE: User Authentication Problem LDAP

2004-11-08 Thread Shapira, Yoav
Hi, Thank you for posting your findings. These are very helpful to people searching the archives. Yoav Shapira http://www.yoavshapira.com >-Original Message- >From: Sandeep N [mailto:[EMAIL PROTECTED] >Sent: Sunday, November 07, 2004 11:45 PM >To: Tomcat Users List >Su

Re: User Authentication Problem LDAP

2004-11-07 Thread Sandeep N
Hi All, I got my problem solved..The culprit was that I hadn't included the attribute "digest" with value "SHA" (SHA because my LDAP directory is storing the password in this format) in the directive in server.xml. Also, I had to change cn to * in web.xml. Now, the things seems to work without an

Re: User Authentication Problem LDAP

2004-11-02 Thread Olivier Jolly
I'm not a specialist in this but it smells like you're saying that the role name are listedin the attribute 'cn' and that to access your site the connected user should have the role 'cn' hence if you do not have a user with it's cn=cn (attribute cn = value "cn"), it won't work. Maybe you could

User Authentication Problem LDAP

2004-11-01 Thread Sandeep N
Hi, I have a problem trying to authenticate users, whose details are stored in the LDAP directory through Apache Tomcat. The details of the software I am using are as follows : LDAP: OpenLDAP V 2.2.17 Web-Server: Apache-Tomcat V 4.1.30 OS: Suse - Linux The LDAP directory structure is somewhat li

RE : User authentication in multi repositories

2004-09-30 Thread LERBSCHER Jean-Pierre
27;origine- De : QM [mailto:[EMAIL PROTECTED] Envoyé : mercredi 29 septembre 2004 23:52 À : Tomcat Users List Objet : Re: User authentication in multi repositories On Wed, Sep 29, 2004 at 01:50:31PM -0300, Ac?cio Furtado Costa wrote: : We would like to know, if it is possible for an appl

Re: User authentication in multi repositories

2004-09-29 Thread QM
On Wed, Sep 29, 2004 at 01:50:31PM -0300, Ac?cio Furtado Costa wrote: : We would like to know, if it is possible for an application to authenticate : users in multiple LDAP Services. For instance, one sub-group of users will : authenticate on our corporate domain (Active Directory) and another :

User authentication in multi repositories

2004-09-29 Thread Acácio Furtado Costa
We would like to know, if it is possible for an application to authenticate users in multiple LDAP Services. For instance, one sub-group of users will authenticate on our corporate domain (Active Directory) and another sub-group (clients, supliers) in other repository (ADAM- Active Directory A

SV: Problem using Tomcat User Authentication

2004-01-24 Thread Søren Blidorf
I guess you should look at session.invalidate();. BR Soren -Oprindelig meddelelse- Fra: amit varshney [mailto:[EMAIL PROTECTED] Sendt: 24. januar 2004 12:47 Til: [EMAIL PROTECTED] Emne: Problem using Tomcat User Authentication I am working in JSP/Servlets on Windows XP. I want to

Problem using Tomcat User Authentication

2004-01-24 Thread amit varshney
I am working in JSP/Servlets on Windows XP. I want to use the Tomcat user Authentication in my web application. So using tomcat's JDBC Realm I have stored the username and passwords in the Oracle 9I Database. I want to use authentcation for accessing the different modules. so I have create

Re: HTTP user authentication

2003-04-04 Thread Bill Barker
Grab the pdf for the servlet-spec that you care about (TC3.3.x := 2.2, TC4.1.x:= 2.3, TC5.x:= 2.4) and look at how to configure the element in your web.xml file. It offers something close to Apache's .httpaccess. Of course, the true masochists can set tomcatAuth="false" on the connector, and do

HTTP user authentication

2003-04-03 Thread Gabor 'Morc' Kormos
Hi Everybody, Can anyone tell me how could I set up Tomcat (any version) to do the same kind of user authenticate that you can do with Apache's .htaccess/.htpasswd? I tried to find info about it, but the docs seem to focus on the servlet container/JSP and not on static HTML page serving.

Re: How to intercept user authentication

2002-12-16 Thread Mike W-M
From: "Iran Marcius" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, December 16, 2002 5:48 PM Subject: How to intercept user authentication I'm trying to do something that propably somebody did before (or, at least needed to). Currently I'm using tomcat 4.1.

How to intercept user authentication

2002-12-16 Thread Iran Marcius
I'm trying to do something that propably somebody did before (or, at least needed to). Currently I'm using tomcat 4.1.16 with Struts 1.0.1 and Velocity Tools for my applications. I configured a BASIC authentication realm, with digested passwords. How can I intercept the process after authenticati

User Authentication question

2002-12-06 Thread Aleksandr Shneyderman
Here my scenario: We have two applications runing on the same server (App A and App B) What we'd like to do is to allow one login prompt but two different role initializations. In other words suppose the user browses the web site and comes upon a page that she needs to authenticate herself fo

Virtual Hosting /manager with better user authentication

2002-10-23 Thread John Murtari
We are currently using Tomcat 4.1.12. We are doing virtual hosting and install the /manager for each virt host. It all looks something like : We are using the JDBC realm to authenticate users through mysql and this is working well. The problem is that there do

User Authentication + Realms + LDAP

2002-09-25 Thread gautam
Hello, I am working on a project that uses Tomcat (with JBoss) and Apache Struts. User authentication needs to support a "Single Sign On" feature which displays a login screen (UserID/Password) if the user is hitting the application directly or it should accept a URL from another a

Re: integrate tomcat with IIS (using JK2) and share user authentication information?

2002-09-19 Thread Matthew Hannigan
On Thu, Sep 19, 2002 at 02:10:58PM -0400, Alvin Wang wrote: > Or thinking the other way around, if we use tomcat to do the authentication, > is there a way that we can prevent IIS from loading some document until > login has been authenticated by tomcat? Only have the sensitive stuff served up by

integrate tomcat with IIS (using JK2) and share user authentication information?

2002-09-19 Thread Alvin Wang
Hi! We plan to integrate tomcat with IIS. As I read, we can use JK2. Also we want IIS to do the authentication. However, tomcat servlet session also need the user login information (username...). So is there a way for tomcat to share (or retrieve) the authentication information with IIS? Or think

User authentication Tomcat 3.2.2

2002-06-27 Thread duffy
I am running Tomcat 3.2.2 on a win2k server as a stand alone web server (part of video conferencing software for administration purposes). I was wondering if there was a way when someone hits the page to have the server prompt for user name and password. In security, for the folder, I removed

RES: Session Tracking / User Authentication

2002-04-10 Thread Edson Carlos Ericksson Richter
l- De: Rick Roberts [mailto:[EMAIL PROTECTED]] Enviada em: quarta-feira, 10 de abril de 2002 16:28 Para: Tomcat Users List Assunto: Session Tracking / User Authentication Can anyone point me to a good reference for handling session tracking and user authentication? All I'm trying to do is

Session Tracking / User Authentication

2002-04-10 Thread Rick Roberts
Can anyone point me to a good reference for handling session tracking and user authentication? All I'm trying to do is authenticate a user (form based) and redirect them to the login page if their session times out. It should be pretty simple, but I'm having trouble with it and I c

User authentication

2002-03-29 Thread @Basebeans.com
Subject: User authentication From: "Hermod Opstvedt" <[EMAIL PROTECTED]> === Hi I have a rather intricate question. In Tomcat you can set up formbased authentication to secure resources with for intance the JDBCRealm, and this works great. Now lets say that you have an ind

RE: Help with User Authentication in Tomcat 3.3a

2002-02-19 Thread Larry Isaacs
(CRD) [mailto:[EMAIL PROTECTED]] > Sent: Monday, February 18, 2002 5:14 PM > To: 'tomcat-user' > Subject: Help with User Authentication in Tomcat 3.3a > > > > I am tyring to set understand the various user authentication > schemes available under Tomcat 3.3. &g

Help with User Authentication in Tomcat 3.3a

2002-02-18 Thread Wise, Bowden (CRD)
I am tyring to set understand the various user authentication schemes available under Tomcat 3.3. I would like to eventually be able to use JDBCRealm with mysql. I found the instructions on the tomcat site, but so far I have been unsusccessful to get it to work. So I thought I would first try

How to develop custom user authentication for Tomcat based onSecurityCheck ?

2001-10-04 Thread Thierry Delaitre
Hello, We have developed a JSP based application based on tomcat 3.2.3. This application requires different level of administration and requires users to login. We would like to develop a custom authentication module for authenticating users against NIS login/password database. I've already deve

Https and user authentication

2001-09-03 Thread Eirik Yksnøy
I have set up tomcat to use https and user authentication. I have ser clientauth to true in server.xml. The server gets the clients certificate , but the page still can not be displayed. I read in the ie help files that when connection to a secure site that site will send the user it&#

User Authentication Apache+mod_ssl+Tomcat 3.2.3

2001-07-20 Thread Asar . Khan
Hello all, I am using the above config and have a JDBC realm set-up using FORM based login. What I want to know is: 1. Is it possible to get the login page to use SSL (https or 443 port) and once the user is validated continue on the standard (http 80 port)? 2. If so, is there any documentati

Applet - http tunneling - user authentication

2001-06-21 Thread Regis Muller
Hi tomcatters, Im using user authentication on apache and I would like to make an applet communicate with a servlet through http tunneling. Here is a snippet of the code I use : dataURL = new URL("http","myserver",80,"/myservlet?action=connect"); conne

Re: user authentication documentation

2001-05-15 Thread Oki DZ
Dante le Poole wrote: > > does anyone know of any docs or examples of how to setup form-based user >authentication? Try this one: http://e-docs.bea.com/wls/docs60/adminguide/config_web_app.html#webapp-auth Oki

AW: user authentication documentation

2001-05-11 Thread Mascha Kluge
: +49 (931) 35 45 8-44 Fax: +49 (931) 35 45 8-19 http://www.bytecom.net mailto:[EMAIL PROTECTED] > -Ursprüngliche Nachricht- > Von: Dante le Poole [mailto:[EMAIL PROTECTED]] > Gesendet: Donnerstag, 10. Mai 2001 16:44 > An: Tomcat User > Betreff: user authentication documenta

RE: user authentication documentation

2001-05-10 Thread Dante le Poole
PROTECTED] ::Subject: Re: user authentication documentation :: :: ::I believe there is an example of this in the examples project's web.xml ::config file :: ::On Thursday 10 May 2001 08:43, you wrote: ::> does anyone know of any docs or examples of how to setup form-based user ::> authen

Re: user authentication documentation

2001-05-10 Thread Christian Hargraves
I believe there is an example of this in the examples project's web.xml config file On Thursday 10 May 2001 08:43, you wrote: > does anyone know of any docs or examples of how to setup form-based user > authentication? > > I read the info in the userguide but it only explains

user authentication documentation

2001-05-10 Thread Dante le Poole
does anyone know of any docs or examples of how to setup form-based user authentication? I read the info in the userguide but it only explains how to setup the database. I need to know how setup the forms, the web.xml and whatever else is necessary. thanx! Dante le Poole

Problem with user authentication

2001-05-10 Thread Stellwag, Christian
Title: Problem with user authentication I've got a Tomcat 3.2 running with standard form-based user authentication for my context. It works fine when accessed from within our Intranet. But I get a login-error after authenticating when accessing the site from the web as if I typed

RE: Help: database user authentication how-to.

2001-02-15 Thread Ignacio J. Ortega
JDBCRealm is on versions 3.2 and up and on 4.0 too... Saludos , Ignacio J. Ortega > -Mensaje original- > De: Fernando Padilla [mailto:[EMAIL PROTECTED]] > Enviado el: jueves 15 de febrero de 2001 17:21 > Para: [EMAIL PROTECTED] > Asunto: Re: Help: database user authen

Re: Help: database user authentication how-to.

2001-02-15 Thread Fernando Padilla
pid > question. > > fern > > > On Thu, 15 Feb 2001, Christian Rauh wrote: > > > Dear People, > > > > I am totally confused on how to proceed with the user authentication in > > my web application. I will try to state my problem briefly: > > >

Re: Help: database user authentication how-to.

2001-02-15 Thread Fernando Padilla
I've been looking at the code in Tomcat 3.2, there is no JDBCRealm present. Do I need to be looking at Tomcat 4.0? Apologies for the stupid question. fern On Thu, 15 Feb 2001, Christian Rauh wrote: > Dear People, > > I am totally confused on how to proceed with the user aut

Help: database user authentication how-to.

2001-02-15 Thread Christian Rauh
Dear People, I am totally confused on how to proceed with the user authentication in my web application. I will try to state my problem briefly: I have a web application that has FORM security. I need to create a way for users to create an account that gives them access to the web application

RE: User Authentication using the Windows NT Authentication

2001-02-05 Thread Michael Percy
Actually, this month's Linux magazine talks about using PAM for user authentication (article on PAM and Samba for Win integration). It basically is aa Apache module that lets you authenticate users against a PDC (I believe), you'll need to look into it as I don't know enough a

User Authentication using the Windows NT Authentication

2001-02-05 Thread Rahul Desai
Hi,     I am building a system for the Intranet. We have a NT network. I wanted to know if by any means I can use the username and password that is registered in the NT Server as the mode of authentication for my site built on Tomcat?   This is possible with the IIS.But I am not sure how it ma

How to set user authentication in Tomcat HTTP server?

2001-01-26 Thread Ulrich . Romahn
This might be a stupid question, but I can't figure it out myself. So, here is the question: How can I setup different users with their password and give them access to different directories/servlets? In Apache you set this up in the httpd.conf in the section and the passwords would go into th

user authentication

2001-01-18 Thread Sam T.
hi all please could someone give me hints on using jdbc [specially jdbcRleam] and servlets or JSP for user authentication to lookup user details to create a connection with. - To unsubscribe, e-mail: [EMAIL PROTECTED] For

Problem with user authentication w/ Tomcat v4.0 m4

2000-12-08 Thread Bryan Basham
up.] I am trying to test user authentication with Tomcat v4.0 m4. I have a *very* simple configuration: * an index page that links to a view-common page and a view-restricted page * the web.xml security constraint on the view-restricted page are set up as:

Using Apache user authentication for pages served by Tomcat

2000-12-08 Thread guyr
Someone else said they could not get authentication directives defined to Apache to work for pages redirected to Tomcat. I encountered the same problem, but have found a workaround. If you update your server.xml file so that the document root used by Tomcat for a particular context is in the Apa

User Authentication config (Tomcat vs. Apache)

2000-12-08 Thread Russell Allen
want user authentication to happen on ANY file, servlet, jsp, etc... in that webapp.   This is what I have done, and the effect:   I added this to my Tomcat/webapps/ecims/web-inf/web.xml file:  Protected Area   /*    DELETE   GET   POST   PUT   ecims  BASIC  Example Basic Authentica

Re: user authentication

2000-11-14 Thread Michelle
Thanx much for the quick response ... may I inquire further please? : For our system, we're managing it all through sessions. When the person logs : in, their login information is checked against a database object. If it : matches, they're logged in. Otherwise, they're asked to provide a corre

Re: user authentication

2000-11-13 Thread Daniel Bruce Lynes
On Mon, 13 Nov 2000, Michelle wrote: > I've been delving through the Tomcat archives and various guru site > out there, trying to piece together a sound approach to handling > user authentication and rights access. I've seen some threads and > articles on using sessions,

user authentication

2000-11-13 Thread Michelle
I've been delving through the Tomcat archives and various guru site out there, trying to piece together a sound approach to handling user authentication and rights access. I've seen some threads and articles on using sessions, some references in the Tomcat archives to JDBCRealm (whic

User authentication based on form parameters

2000-11-09 Thread Hector Gonzalez
Hi,   I have an application that has a single servlet. That servlet receives two mandatory paramenters: Screen and Action (i,e main?scree=user&action=show). I also have an xml file that describes the role that the user needs to be in in order to access the screen:   Screen Action   Role