AW: OpenId with apache and tomcat

2020-03-20 Thread bernd . schatz
Hi Stephane, > -Ursprüngliche Nachricht- > Von: Stephane Passignat > Gesendet: 13 March 2020 17:53 > An: Tomcat Users List > Actually I have Apache2 operating as proxy and authenticate layer (HTTP > Form and HTTP Basic), in front of several Tomcat instances and webapps. > Apache

Re: OpenId with apache and tomcat

2020-03-14 Thread Stephane Passignat
Ok thanks André and Luis for your helps and feedbacks. Message initial De: André Warnier (tomcat/perl) Répondre à: Tomcat Users List À: users@tomcat.apache.org Objet: Re: OpenId with apache and tomcat Date: Fri, 13 Mar 2020 23:47:08 +0100 On 13.03.2020 17:53, Stephane

Re: OpenId with apache and tomcat

2020-03-13 Thread tomcat/perl
On 13.03.2020 17:53, Stephane Passignat wrote: Hi, Actually I have Apache2 operating as proxy and authenticate layer (HTTP Form and HTTP Basic), in front of several Tomcat instances and webapps. Apache pushes the userId to tomcat through AJP. On tomcat side, the webapp has a Basic login-module

Re: OpenId with apache and tomcat

2020-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Luis, On 3/13/20 14:28, Luis Rodríguez Fernández wrote: > Hello Stephane, > >> moving authentication at tomcat level with an openid Realm > > If I understand you correctly you want to make the authentication > process in tomcat instead of

Re: OpenId with apache and tomcat

2020-03-13 Thread Luis Rodríguez Fernández
Hello Stephane, > moving authentication at tomcat level with an openid Realm If I understand you correctly you want to make the authentication process in tomcat instead of delegating in your apache proxy, don't you ? I would have a look then at the tomcat keycloak adapter [1]. Me I am using the

OpenId with apache and tomcat

2020-03-13 Thread Stephane Passignat
Hi, Actually I have Apache2 operating as proxy and authenticate layer (HTTP Form and HTTP Basic), in front of several Tomcat instances and webapps. Apache pushes the userId to tomcat through AJP. On tomcat side, the webapp has a Basic login-module in web.xml. I'm quite satisfied of the result,