Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-17 Thread Nikhil
On Wed, Jul 16, 2008 at 8:06 PM, Rainer Jung [EMAIL PROTECTED] wrote: Thanks Rainer. If I want to explicitly pass an environment variable from the httpd to the tomcat, I am using the RequestHeader, JkEnvVar, Setenv but unable to have them as it is passed in the tomcat... how do I go about

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread André Warnier
Nikhil wrote: On Tue, Jul 15, 2008 at 6:35 PM, Rainer Jung [EMAIL PROTECTED] wrote: What do you expect to be the value of the 'REMOTE_USER' variable? Do you expoect something else, than what you get from request.getRemoteUser()? What do you mean by variable? Maybe an httpd environment

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Rainer Jung
Nikhil schrieb: On Tue, Jul 15, 2008 at 6:35 PM, Rainer Jung [EMAIL PROTECTED] wrote: What do you expect to be the value of the 'REMOTE_USER' variable? Do you expoect something else, than what you get from request.getRemoteUser()? What do you mean by variable? Maybe an httpd environment

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Nikhil
On Wed, Jul 16, 2008 at 2:52 PM, Rainer Jung [EMAIL PROTECTED] wrote: To repeat two of my questions: What do you expect to be the value of the 'REMOTE_USER' variable? Do you expect something else, than what you get from request.getRemoteUser()? After I understand that, we can find an

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Nikhil
I tried using both getAttribute methods and getHeaderNames/getHeaders methods but unfortunately the variables are set to null On Wed, Jul 16, 2008 at 2:01 PM, André Warnier [EMAIL PROTECTED] wrote: Nikhil wrote: On Tue, Jul 15, 2008 at 6:35 PM, Rainer Jung [EMAIL PROTECTED] wrote: What do

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Rainer Jung
Nikhil schrieb: On Wed, Jul 16, 2008 at 2:52 PM, Rainer Jung [EMAIL PROTECTED] wrote: To repeat two of my questions: What do you expect to be the value of the 'REMOTE_USER' variable? Do you expect something else, than what you get from request.getRemoteUser()? After I understand that, we

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Nikhil
Thanks for the explanation, Rainer. Fine, I am going with using the method only then... Regards, Nikhil On Wed, Jul 16, 2008 at 3:22 PM, Rainer Jung [EMAIL PROTECTED] wrote: Nikhil schrieb: On Wed, Jul 16, 2008 at 2:52 PM, Rainer Jung [EMAIL PROTECTED] wrote: To repeat two of my

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Nikhil
On Wed, Jul 16, 2008 at 3:22 PM, Rainer Jung [EMAIL PROTECTED] wrote: Nikhil schrieb: On Wed, Jul 16, 2008 at 2:52 PM, Rainer Jung [EMAIL PROTECTED] wrote: To repeat two of my questions: What do you expect to be the value of the 'REMOTE_USER' variable? Do you expect something else,

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Rainer Jung
Thanks Rainer. If I want to explicitly pass an environment variable from the httpd to the tomcat, I am using the RequestHeader, JkEnvVar, Setenv but unable to have them as it is passed in the tomcat... how do I go about that? While I am completely convinced to use getRemoteUser() method only for

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-15 Thread Nikhil
I am still not able to get this straight. Looking at the server.xml tells me there is a userDatabase resource that is looked which I may need to comment? Could you please confirm? I am posting my server.xml (tomcat-6.0.16) for thoroughness so I do not miss any points here : Please let me know if

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-15 Thread Nikhil
While I am at it, I found this interesting information from the jk_logs: [Tue Jul 15 12:57:40 2008] [20026:0001] [debug] jk_uri_worker_map.c (589): Attempting to map URI '/examples/jsp/rheaders.jsp' from 0 maps [Tue Jul 15 12:57:40 2008] [20026:0001] [debug]

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-15 Thread Rainer Jung
Nikhil schrieb: [Tue Jul 15 12:57:40 2008] [20026:0001] [debug] mod_jk.c (607): Service protocol=HTTP/1.1 method=GET host=(null) addr=149.77.175.155 name= is3.hyd.deshaw.com port=8080 auth=(null) user=(null) laddr=149.77.160.20raddr= 149.77.175.155 -- If noticed, auth=(null) and

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-15 Thread Nikhil
On Tue, Jul 15, 2008 at 2:23 PM, Rainer Jung [EMAIL PROTECTED] wrote: Nikhil schrieb: [Tue Jul 15 12:57:40 2008] [20026:0001] [debug] mod_jk.c (607): Service protocol=HTTP/1.1 method=GET host=(null) addr=149.77.175.155 name= is3.hyd.deshaw.com port=8080 auth=(null) user=(null)

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-15 Thread Rainer Jung
Thats right and clueful. Yes, I modifued my httpd.conf to include the webapp location that I was going through and it updated the remote user, I was able to use have the result now properly set from the request.getRemoteUser call. Fine. BUT, again, I was not able to pass the 'REMOTE_USER'

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-15 Thread Nikhil
On Tue, Jul 15, 2008 at 6:35 PM, Rainer Jung [EMAIL PROTECTED] wrote: What do you expect to be the value of the 'REMOTE_USER' variable? Do you expoect something else, than what you get from request.getRemoteUser()? What do you mean by variable? Maybe an httpd environment Variable? Precisely.

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Rainer Jung
Nikhil wrote: The remote user gets forwarded automatically, but in order to make Tomcat accept that info and not try to authenticate itself, you need to set tomcatAuthentication=false in the ajp connector element in server.xml. See also http://tomcat.apache.org/tomcat-6.0-doc/config/ajp.html

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Nikhil
On Mon, Jul 14, 2008 at 2:39 PM, Rainer Jung [EMAIL PROTECTED] wrote: First of all 5.5.12 is very outdated and also very early in the 5.5 release cycle. You need to add 'tomcatAuthentication=false' in the Connector element for your AJP connector. The connector you showed us above is - an

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Nikhil
On Mon, Jul 14, 2008 at 4:22 PM, Nikhil [EMAIL PROTECTED] wrote: On Mon, Jul 14, 2008 at 2:39 PM, Rainer Jung [EMAIL PROTECTED] wrote: First of all 5.5.12 is very outdated and also very early in the 5.5 release cycle. You need to add 'tomcatAuthentication=false' in the Connector element

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Rainer Jung
Nikhil wrote: On Mon, Jul 14, 2008 at 4:22 PM, Nikhil [EMAIL PROTECTED] wrote: On Mon, Jul 14, 2008 at 2:39 PM, Rainer Jung [EMAIL PROTECTED] wrote: First of all 5.5.12 is very outdated and also very early in the 5.5 release cycle. You need to add 'tomcatAuthentication=false' in the

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Nikhil
On Mon, Jul 14, 2008 at 5:00 PM, Rainer Jung [EMAIL PROTECTED] wrote: Again, the http connector is *not* what you need to edit, if you want to combine Tomcat with mod_jk or mod_proxy_ajp. It is the AJP connector. See my previous mail. You need to add tomcatAuthentication=false to that

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Nikhil
Rainer, I seem to have found a related link on this but this is really old pertaining to the older versions of Tomcat.. any suggestions please. http://marc.info/?t=10431829842r=1w=2

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Rainer Jung
Nikhil wrote: !-- Define an AJP 1.3 Connector on port 8009 -- Connector port=64089 enableLookups=false redirectPort=64083 tomcatAuthentication=false protocol=AJP/1.3 / OK After editing the change in the ajp connector, and restarting the tomcat, I still

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Nikhil
I tried out Tomcat6 too and added 'tomcatAuthentication=false' to the ajp connector but that still not work. :-( On Mon, Jul 14, 2008 at 7:15 PM, Nikhil [EMAIL PROTECTED] wrote: Rainer, I seem to have found a related link on this but this is really old pertaining to the older versions of

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Nikhil
On Mon, Jul 14, 2008 at 7:46 PM, Rainer Jung [EMAIL PROTECTED] wrote: Use request.getRemoteUser() HTH Rainer Thanks Rainer. I am now using Tomcat6(latest stable release) and configured the server.xml with ajp connector to use tomcatAuthentication=false and I am still getting the 'null'

RE: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-13 Thread Caldarale, Charles R
From: Nikhil [mailto:[EMAIL PROTECTED] Subject: tomcat, apache with mod_jk and mod_auth_kerb I have earlier tried using the mod_rewrite module with proxy .. but that would ask me to enable the http connector port of the tomcat instance and will prompt to keep the spoofing chances wide

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-13 Thread Rainer Jung
Hi Nikhil, Nikhil schrieb: I have no problems in using mod_jk but could not figure out the ways of passing the remote_user variable effectively to the tomcat instance would also desire to have a scalability that with a single httpd instance supporting the multiple tomcat instances (may be

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-13 Thread Nikhil
Not necessarily. You could configure address attribute of the Tomcat HTTP Connector to listen only on 127.0.0.1 if httpd is on the same system, or if on a different system, configure Tomcat's RemoteAddrValve to limit requests to just that system.

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-13 Thread Nikhil
The remote user gets forwarded automatically, but in order to make Tomcat accept that info and not try to authenticate itself, you need to set tomcatAuthentication=false in the ajp connector element in server.xml. See also http://tomcat.apache.org/tomcat-6.0-doc/config/ajp.html If you