RE: IIS authentication applies to static but not dynamic requests (servlets, JSPs). Any way to control that?

2018-06-11 Thread charlie arehart
> -Original Message- > From: Igal @ Lucee.org > Sent: Monday, June 11, 2018 04:55 PM > To: users@tomcat.apache.org > Subject: Re: IIS authentication applies to static but not dynamic requests > (servlets, JSPs). Any way to control that? > > Charlie, > > Are you sure that the static

Re: IIS authentication applies to static but not dynamic requests (servlets, JSPs). Any way to control that?

2018-06-11 Thread Igal @ Lucee.org
Charlie, On 6/11/2018 2:38 PM, charlie arehart wrote: Folks, I have found that if Windows authentication (NTLM) is enabled for a site (or folder) in IIS, such authentication does apply (and is honored) for static files (html, images) but NOT dynamic ones (servlets, JSPs). Is that intended?

IIS authentication applies to static but not dynamic requests (servlets, JSPs). Any way to control that?

2018-06-11 Thread charlie arehart
Folks, I have found that if Windows authentication (NTLM) is enabled for a site (or folder) in IIS, such authentication does apply (and is honored) for static files (html, images) but NOT dynamic ones (servlets, JSPs). Is that intended? To be clear, this is the latest Tomcat 8 (8.5.31) and the

Re: creation of virtual directories

2018-06-11 Thread Jeffrey Beckstrom
We would go with the latest which appears to be 9. Google found articles for V7 and one that said it changed in 8 but did not describe the change. >>> Mark Thomas 6/11/18 3:06 PM >>> On 11/06/18 19:58, Jeffrey Beckstrom wrote: > We are looking at migrating from Glassfish to Tomcat. In Glassfish,

Re: creation of virtual directories

2018-06-11 Thread Mark Thomas
On 11/06/18 19:58, Jeffrey Beckstrom wrote: > We are looking at migrating from Glassfish to Tomcat. In Glassfish, we > created alternatedocroot_N entries to map a path in Glassfish to a > windows drive. > > How do we perform a similar function in Tomcat? Tomcat version? (it changed between 7.0.x

creation of virtual directories

2018-06-11 Thread Jeffrey Beckstrom
We are looking at migrating from Glassfish to Tomcat. In Glassfish, we created alternatedocroot_N entries to map a path in Glassfish to a windows drive. How do we perform a similar function in Tomcat? Jeffrey Beckstrom Lead Database Administrator Information Technology Department Greater

Re: Tomcat Secure WebSockets clients - hostname verification

2018-06-11 Thread Mark Thomas
On 11/06/18 11:47, Weiner Harald wrote: > What are your thoughts? I'm leaning towards adding: SSLParameters sslParams = new SSLParameters(); sslParams.setEndpointIdentificationAlgorithm("HTTPS"); sslSocket.setSSLParameters(sslParams); unconditionally to WsWebSocketContainer.createSSLEngine()

Tomcat Secure WebSockets clients - hostname verification

2018-06-11 Thread Weiner Harald
Hello Tomcat user group, I want a Tomcat-Servlet to connect to a secure web socket endpoint to exchange data with another component / server (so my Tomcat-Servlet is acting as a WebSocket client). Now I would also like to do some hostname verification (verify that the host to which I am

Re: Configuration of Tomcat Container to use SAML authentication

2018-06-11 Thread Luis Rodríguez Fernández
Hello Sandeep, Both keycloack saml adapter [1] or the servlet filter[2] work for me out-of-the-box. I am using tomcat 9.0.5 Cheers, Luis [1] https://www.keycloak.org/docs/latest/securing_apps/index.html#_saml-tomcat-adapter [2]