Re: Converting to container based security.

2009-07-19 Thread Pid
On 19/7/09 04:56, Bill Davidson wrote: Tomcat 6.0.18 Java 1.6.0_14 RedHat 5.2 Server Oracle 10g I've got an old web app that was originally spec'd in 1999. Last year, I got it migrated from Tomcat 3.2.4 for 6.0.16 and more recently from Java 1.4.2 to 1.6. I'm gradually trying to modernize it.

Re: Converting to container based security.

2009-07-19 Thread Mark Thomas
Pid wrote: There is/was a multi realm, but I think it's intended for use with an SSL cert Form auth combination. No. Realms do not care about the authentication mechanism. The new (in 6.0.20) CombinedRealm [1] could be used to merge two DataSourceRealms. A combined Realm will work with *any*

Re: Converting to container based security.

2009-07-19 Thread Bill Davidson
Mark Thomas wrote: Alternatively, you could use a database view to present the two sets of users as a single table. What about duplicated user names between the two sides? There's also the need to make sure that the admin side servlets are not accessible to the public side and vice versa and

Re: Converting to container based security.

2009-07-19 Thread Pid
On 19/7/09 18:52, Bill Davidson wrote: Mark Thomas wrote: Alternatively, you could use a database view to present the two sets of users as a single table. What about duplicated user names between the two sides? That might not be an issue if admin users don't use the public site, and vice

Converting to container based security.

2009-07-18 Thread Bill Davidson
Tomcat 6.0.18 Java 1.6.0_14 RedHat 5.2 Server Oracle 10g I've got an old web app that was originally spec'd in 1999. Last year, I got it migrated from Tomcat 3.2.4 for 6.0.16 and more recently from Java 1.4.2 to 1.6. I'm gradually trying to modernize it. I just converted from using an old