Re: Tomcat 9.0.62: Setting STRICT_SERVLET_COMPLIANCE to true breaks Tomcat Single Sign On

2022-07-15 Thread Wenshiuan Tang
Mark, Thanks for the comments. Yes, LegacCookieProcessor gets invoked in my case, not the default Rfc6265CookieProcessor as documented at Tomcat 9 Cookie Processor Component ( https://tomcat.apache.org/tomcat-9.0-doc/config/cookie-processor.html). I enabled debugging for a few components: - "org

Re: Tomcat 9.0.62: Setting STRICT_SERVLET_COMPLIANCE to true breaks Tomcat Single Sign On

2022-07-14 Thread Mark Thomas
) - web app #2 - ... ... - web app #X I use Tomcat SingleSignOn valve for moving around the web apps with one authentication. However, Tomcat single sign on stop working after I set the parameter STRICT_SERVLET_COMPLIANCE to true. I tried to look up the use of

Tomcat 9.0.62: Setting STRICT_SERVLET_COMPLIANCE to true breaks Tomcat Single Sign On

2022-07-14 Thread Wenshiuan Tang
web apps with one authentication. However, Tomcat single sign on stop working after I set the parameter STRICT_SERVLET_COMPLIANCE to true. I tried to look up the use of STRICT_SERVLET_COMPLIANCE with Tomcat 9 but didn't find much info related to the cookie issue I encountered. - Setup --

RE: Single sign on

2016-10-11 Thread Caldarale, Charles R
> From: Linux Support [mailto:ossuppor...@gmail.com] > Subject: Single sign on > Using 8.5.5 on solaris. Can you please point me in the direction of some > documentation/link/blog for how to set up the SSO for a application > deployed. Start here. http://tomcat.apache.org/tomcat

Single sign on

2016-10-11 Thread Linux Support
Hi, Using 8.5.5 on solaris. Can you please point me in the direction of some documentation/link/blog for how to set up the SSO for a application deployed. Further, please share your experience and the process. Kind regards OSP

Re: Extending Apache Tomcat's Single Sign On feature with org.apache.catalina.authenticator.SingleSignOn

2015-12-09 Thread Chiranga Alwis
Hi kidambi, In my understanding (since I am new to most of these technologies), this SSO feature is provided as a server side single sign on feature. To be more descriptive, I am intending to use this as a valve in server.xml of Tomcat distribution instead of the existing, default SingleSignOn

Re: Extending Apache Tomcat's Single Sign On feature with org.apache.catalina.authenticator.SingleSignOn

2015-12-09 Thread kidambi madhu
Hi Chiranga, Are you providing the SSO feature as a server side single Sign on or as a Servlet that can be used as a Controller in the desired apps to enable Application SSO? Regards, Madhu On Wed, Dec 9, 2015 at 8:43 PM, Chiranga Alwis wrote: > Hi, > > I have been attempting to e

Extending Apache Tomcat's Single Sign On feature with org.apache.catalina.authenticator.SingleSignOn

2015-12-09 Thread Chiranga Alwis
Hi, I have been attempting to extend the Single Sign On feature of Apache Tomcat by extending the org.apache.catalina.authenticator.SingleSignOn class. My attempt is to create a Java Maven project extending the above class which outputs a jar and add the resultant jar file to the $CATALINA_HOME

Re: Single Sign On Replication with New Tomcat Cluster Nodes

2014-12-10 Thread Aaron R
is configured to use the > DeltaManager > > for session replication. It also uses the ClusterSingleSignOn valve for > SSO > > and for propagating authentication to the other nodes in the cluster. If > I > > log into Tomcat1, the session state and the single sign on

Re: Single Sign On Replication with New Tomcat Cluster Nodes

2014-12-09 Thread Keiichi Fujino
o use the DeltaManager > for session replication. It also uses the ClusterSingleSignOn valve for SSO > and for propagating authentication to the other nodes in the cluster. If I > log into Tomcat1, the session state and the single sign on state are > successfully replicated to Tomcat2, so t

Single Sign On Replication with New Tomcat Cluster Nodes

2014-12-04 Thread Aaron R
Hello, I have a Tomcat cluster (7.0.42) that is configured to use the DeltaManager for session replication. It also uses the ClusterSingleSignOn valve for SSO and for propagating authentication to the other nodes in the cluster. If I log into Tomcat1, the session state and the single sign on

RE: tomcat 7.0.2 single sign on issue

2010-09-15 Thread Ming_Chang
Thanks. I will wait for 7.0.3 -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Wednesday, September 15, 2010 12:39 PM To: Tomcat Users List Subject: Re: tomcat 7.0.2 single sign on issue On 15/09/2010 19:25, ming_ch...@mcafee.com wrote: > Thanks for looking at t

Re: tomcat 7.0.2 single sign on issue

2010-09-15 Thread Mark Thomas
On 15/09/2010 19:25, ming_ch...@mcafee.com wrote: > Thanks for looking at this issue. Already fixed. Will be in 7.0.3 http://svn.apache.org/repos/asf/tomcat/trunk/webapps/docs/changelog.xml Mark - To unsubscribe, e-mail: users-

tomcat 7.0.2 single sign on issue

2010-09-15 Thread Ming_Chang
Hi, there, I am playing with the latest 7.0.2 and the single sign on part is not working correctly. And I debugged the problem and found the sso member variable is always null in AuthenticatorBase class. Here is the clip of code in this class I found it may have a problem. This code tries to

Re: Single Sign-On problems (SSO not the cause)

2010-08-16 Thread André Warnier
ifs be tying up the system? Any ideas? With respect, I think that you are getting quite a few things mixed up. There are threee different things altogether : - User Authentication, here achieved (or not) at the Tomcat level by the jCIFS NtlmHttp filter. - SSO, meaning Single-Sign-On, which

Re: [OT] Single Sign-On problems

2010-08-16 Thread André Warnier
Stewart, Kevin L. (GSFC-417.0)[CONSTELLATION SOFTWARE ENGINEERING] wrote: Pid, I can't seem to open any of your emails. Outlook (with Entrust) says that they are encrypted but with invalid mime. Chances are overwhelming that it's Outlook (or Entrust) that's wrong. Get yourself a real email c

RE: Single Sign-On problems

2010-08-16 Thread Stewart, Kevin L. (GSFC-417.0)[CONSTELLATION SOFTWARE ENGINEERING]
Pid, I can't seem to open any of your emails. Outlook (with Entrust) says that they are encrypted but with invalid mime. From: Pid [mailto:p...@pidster.com] Sent: Monday, August 16, 2010 12:54 PM To: Tomcat Users List Subject: Re: Single Sign-On problems

Re: Single Sign-On problems

2010-08-16 Thread André Warnier
Carlton Whitmore wrote: Andre, The only reason I think it's Tomcat because when we change the Tomcat version it seems to affect the speed of the application (Tomcat 7 runs very slow, but no SSO errors; Tomcat 6 runs fast, but SSO errors). We're using Active Directory to authenticate. I guess i

RE: Single Sign-On problems

2010-08-15 Thread Caldarale, Charles R
> From: Carlton Whitmore [mailto:cwhitm...@advocacyinc.org] > Subject: RE: Single Sign-On problems > > The server is running as a VM on Hyper-V R2. I've checked the CPU and > disk access during these times and everything looks fine. We're using > internal DNS ser

RE: Single Sign-On problems

2010-08-15 Thread Carlton Whitmore
___ From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Sun 8/15/2010 9:07 PM To: Tomcat Users List Subject: RE: Single Sign-On problems > From: Carlton Whitmore [mailto:cwhitm...@advocacyinc.org] > Subject: RE: Single Sign-On problems > > Tomcat 7 runs ver

RE: Single Sign-On problems

2010-08-15 Thread Caldarale, Charles R
> From: Carlton Whitmore [mailto:cwhitm...@advocacyinc.org] > Subject: RE: Single Sign-On problems > > Tomcat 7 runs very slow, but no SSO errors; Tomcat 6 runs > fast, but SSO errors Have you looked to see what's going on during the slowdown? Is there high CPU usage, or p

RE: Single Sign-On problems

2010-08-15 Thread Carlton Whitmore
nt: Sun 8/15/2010 11:45 AM To: Tomcat Users List Subject: Re: Single Sign-On problems Carlton Whitmore wrote: > We're running Windows 2008 R2, Tomcat 6, MS SQL 2005, JDK 6 update 20 > and authenticating using AD from Windows 2003 R2 server. > > > > The application we'

Re: Single Sign-On problems

2010-08-15 Thread Pid
On 15/08/2010 17:45, André Warnier wrote: > Carlton Whitmore wrote: >> We're running Windows 2008 R2, Tomcat 6, MS SQL 2005, JDK 6 update 20 >> and authenticating using AD from Windows 2003 R2 server. >> >> >> >> The application we're using causes

Re: Single Sign-On problems

2010-08-15 Thread André Warnier
Carlton Whitmore wrote: We're running Windows 2008 R2, Tomcat 6, MS SQL 2005, JDK 6 update 20 and authenticating using AD from Windows 2003 R2 server. The application we're using causes intermittent single sign-on errrors. We tried to upgrade to Tomcat 7 and the SSO errors went

Single Sign-On problems

2010-08-14 Thread Carlton Whitmore
We're running Windows 2008 R2, Tomcat 6, MS SQL 2005, JDK 6 update 20 and authenticating using AD from Windows 2003 R2 server. The application we're using causes intermittent single sign-on errrors. We tried to upgrade to Tomcat 7 and the SSO errors went away, but the system was so s

Re: Single Sign-On in two server

2010-06-16 Thread Andrew Bruno
User web application > > > I need to implement Single Sign-On for this two web application. While user > is logging to "https://localhost:8080/admin";, That user able access " > https://localhost:9090/user"; application I need to login that user without >

Single Sign-On in two server

2010-06-16 Thread Chandana Napagoda
Hi, I have two tomcat instance, frist one run on https://localhost:8080 and secound one run on https://localhost:9090. each server i have deployed Admin and User web application I need to implement Single Sign-On for this two web application. While user is logging to "https://localhost

Re: Single Sign On Valve

2010-04-19 Thread Pid
On 19/04/2010 08:05, Arnab Ghosh wrote: > Hello Friends, > > I want to know about the Single Sign On Valve. Why/when should we use this > valve?? > > I have already studied the documentation about this. But I haven't got a > clear idea about it. Is there any relat

Single Sign On Valve

2010-04-19 Thread Arnab Ghosh
Hello Friends, I want to know about the Single Sign On Valve. Why/when should we use this valve?? I have already studied the documentation about this. But I haven't got a clear idea about it. Is there any relation of Single-Sign-On with session management?? Please help me on this. T

RE: Questions on "Single Sign On"?

2009-10-20 Thread Martin Gainty
nt donné que les email peuvent facilement être sujets à la manipulation, nous ne pouvons accepter aucune responsabilité pour le contenu fourni. > Date: Tue, 20 Oct 2009 11:32:49 -0400 > From: ch...@christopherschultz.net > To: users@tomcat.apache.org > Subject: Re: Questions on &q

Re: Questions on "Single Sign On"?

2009-10-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 10/20/2009 11:22 AM, André Warnier wrote: > Now, how would a user in this case try to login a second time, when they > are already authenticated ? I think he's talking about a second login using the same credentials from another terminal.

Re: Questions on "Single Sign On"?

2009-10-20 Thread André Warnier
Josh Gooding wrote: Andre, I am using a realm for this. I decided that the best route to go on this is if a user is actively logged in and tries to log in again (while already authenticated) to invalidate the 'other' session and continue on, that way of the browser dies, they can still get in.

Re: Questions on "Single Sign On"?

2009-10-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Josh, On 10/20/2009 9:19 AM, Josh Gooding wrote: > I am using a realm for this. I decided that the best route to go on this is > if a user is actively logged in and tries to log in again (while already > authenticated) to invalidate the 'other' sessi

Re: Questions on "Single Sign On"?

2009-10-20 Thread Josh Gooding
owever not clue one on how to do this. What is put in the session upon authentication that I could have my code look for to invalidate the "other" live session? - Josh On Mon, Oct 12, 2009 at 10:01 AM, André Warnier wrote: > Josh Gooding wrote: > >> To my knowledge the Singl

Re: Questions on "Single Sign On"?

2009-10-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 10/12/2009 11:03 AM, André Warnier wrote: > [servlet-filter mechanisms] consist of wrapping all your to-be-protected webapps in a servlet > filter, which authenticates each request before it even gets to your > webapp. Servlet filters are d

Re: Questions on "Single Sign On"?

2009-10-12 Thread Josh Gooding
Ugh... tabs said it all. I didn't take into consideration about them. On Mon, Oct 12, 2009 at 11:41 AM, Andre-John Mas wrote: > > On 12-Oct-2009, at 11:24, Josh Gooding wrote: > > Well upon clicking "logout" the following occurs: >> >> session.removeAttribute("User"); >> session.invalidate();

Re: Questions on "Single Sign On"?

2009-10-12 Thread Andre-John Mas
On 12-Oct-2009, at 11:41, Josh Gooding wrote: On Mon, Oct 12, 2009 at 11:03 AM, André Warnier wrote: Josh Gooding wrote: ... Andre, your talking about something like Active Directory for Windows Domain's to use with say Communicator, Outlook, etc, across windows environments with domai

Re: Questions on "Single Sign On"?

2009-10-12 Thread Josh Gooding
On Mon, Oct 12, 2009 at 11:03 AM, André Warnier wrote: > Josh Gooding wrote: > ... > >> >> Andre, your talking about something like Active Directory for Windows >> Domain's to use with say Communicator, Outlook, etc, across windows >> environments with domain authentication? >> > Yes, although Wi

Re: Questions on "Single Sign On"?

2009-10-12 Thread Andre-John Mas
On 12-Oct-2009, at 11:24, Josh Gooding wrote: Well upon clicking "logout" the following occurs: session.removeAttribute("User"); session.invalidate(); response.sendRedirect("EULA.jsp"); If I close the browser window, and reopen it without clicking the logout button, I can still get back int

Re: Questions on "Single Sign On"?

2009-10-12 Thread Peter Crowther
2009/10/12 Josh Gooding : > If I close the browser window, and reopen it without clicking the logout > button, I can still get back into my active session.  How would I invalidate > the session upon closing the browser window? I'm surprised that happens if you shut down the browser *process* (that

Re: Questions on "Single Sign On"?

2009-10-12 Thread Josh Gooding
> On 10/12/2009 9:37 AM, Peter Crowther wrote: >> >>> 2009/10/12 Josh Gooding : >>> >>>> To my knowledge the Single Sign on in Tomcat is a way for all of your >>>> back >>>> end applications in your VH to recognize that you have logged in

Re: Questions on "Single Sign On"?

2009-10-12 Thread Pid
ne. I appreciate the input. - Josh On Mon, Oct 12, 2009 at 9:50 AM, Pid wrote: On 12/10/2009 14:37, Peter Crowther wrote: 2009/10/12 Josh Gooding: To my knowledge the Single Sign on in Tomcat is a way for all of your back end applications in your VH to recognize that you have logged in to

Re: Questions on "Single Sign On"?

2009-10-12 Thread André Warnier
Josh Gooding wrote: ... Andre, your talking about something like Active Directory for Windows Domain's to use with say Communicator, Outlook, etc, across windows environments with domain authentication? Yes, although Windows domain authentication is not the only game in town. I understand wh

Re: Questions on "Single Sign On"?

2009-10-12 Thread Andre-John Mas
On 12-Oct-2009, at 10:51, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Perter, On 10/12/2009 9:37 AM, Peter Crowther wrote: 2009/10/12 Josh Gooding : To my knowledge the Single Sign on in Tomcat is a way for all of your back end applications in your VH to

Re: Questions on "Single Sign On"?

2009-10-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Perter, On 10/12/2009 9:37 AM, Peter Crowther wrote: > 2009/10/12 Josh Gooding : >> To my knowledge the Single Sign on in Tomcat is a way for all of your back >> end applications in your VH to recognize that you have logged in to on

Re: Questions on "Single Sign On"?

2009-10-12 Thread Peter Crowther
2009/10/12 Josh Gooding : > As for handling browser crashes, I'll > have to set the timeout to an appropriate time,  (1/2 hour or so) but if you > are watching videos and testing, or reading docs, you can chew up 1/2 hour > easily so I haven't really thought it through fully yet. Pid's approach of

Re: Questions on "Single Sign On"?

2009-10-12 Thread Josh Gooding
On 12/10/2009 14:37, Peter Crowther wrote: > >> 2009/10/12 Josh Gooding: >> >>> To my knowledge the Single Sign on in Tomcat is a way for all of your >>> back >>> end applications in your VH to recognize that you have logged in to one >>> place, and

Re: Questions on "Single Sign On"?

2009-10-12 Thread André Warnier
Josh Gooding wrote: To my knowledge the Single Sign on in Tomcat is a way for all of your back end applications in your VH to recognize that you have logged in to one place, and all of the apps belonging to that VH will be logged into. Well, "kind of".. What I am trying to do is re

Re: Questions on "Single Sign On"?

2009-10-12 Thread Pid
On 12/10/2009 14:37, Peter Crowther wrote: 2009/10/12 Josh Gooding: To my knowledge the Single Sign on in Tomcat is a way for all of your back end applications in your VH to recognize that you have logged in to one place, and all of the apps belonging to that VH will be logged into. Correct

Re: Questions on "Single Sign On"?

2009-10-12 Thread Peter Crowther
2009/10/12 Josh Gooding : > To my knowledge the Single Sign on in Tomcat is a way for all of your back > end applications in your VH to recognize that you have logged in to one > place, and all of the apps belonging to that VH will be logged into. Correct. > What I am trying to do

RE: Questions on "Single Sign On"?

2009-10-12 Thread Martin Gainty
aucune responsabilité pour le contenu fourni. > Date: Mon, 12 Oct 2009 09:17:21 -0400 > Subject: Questions on "Single Sign On"? > From: josh.good...@gmail.com > To: users@tomcat.apache.org > > To my knowledge the Single Sign on in Tomcat is a way for all of your bac

Questions on "Single Sign On"?

2009-10-12 Thread Josh Gooding
To my knowledge the Single Sign on in Tomcat is a way for all of your back end applications in your VH to recognize that you have logged in to one place, and all of the apps belonging to that VH will be logged into. What I am trying to do is restrict the login from users to one single session

Using X509 proxy certificate for single sign on using APR (grid security)

2008-11-04 Thread Thilina Gunarathne
Hi, I'm trying to support mutually authenticated SSL connection to tomcat using pem encoded x509 certificates. I use APR as mentioned in http://tomcat.apache.org/tomcat-5.5-doc/apr.html. I have the mutual authentication working well for normal certificates. We use our own CA's. Our tomcat setup is

Re: is possible Single sign on authentication with unique page login on the same tomcat server?

2008-10-10 Thread Mariano López
Hi Christopher, I will try this and well see. Thank you for your attention, Mariano 2008/10/10 Christopher Schultz <[EMAIL PROTECTED]> > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Mariano, > > Mariano López wrote: > > Hi Christopher, that is what I have, but tomcat always put the curre

Re: is possible Single sign on authentication with unique page login on the same tomcat server?

2008-10-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mariano, Mariano López wrote: > Hi Christopher, that is what I have, but tomcat always put the current > context name before login page URL of other context and gives bad reference > to page. I'm not suggesting that you do: /path/to/other/context/lo

Re: is possible Single sign on authentication with unique page login on the same tomcat server?

2008-10-10 Thread Mariano López
Hi Christopher, that is what I have, but tomcat always put the current context name before login page URL of other context and gives bad reference to page. Regards, Mariano 2008/10/10 Christopher Schultz <[EMAIL PROTECTED]> > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Mariano, > > Mari

Re: is possible Single sign on authentication with unique page login on the same tomcat server?

2008-10-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mariano, Mariano López wrote: > I have added the second context into the same server and i like to set > in web.xml context file to access a page > from the other context, but always starts the URL's page login with its name > context. I'm not sure

is possible Single sign on authentication with unique page login on the same tomcat server?

2008-10-10 Thread Mariano López
Hi all, I have implemented a custom single sign on JAAS login for a tomcat 6.018 server, it's works perfectly with my only context that I had until now. I have added the second context into the same server and i like to set in web.xml context file to access a page from the other context

Single Sign On valve issue

2008-09-10 Thread Ben Newman
I'm having an issue with the single sign on valve under tomcat 6. I have 2 webapps and if a user logs in under app A but then only uses app B, they get logged out after 30 minutes. The session timing out in app A removes the login information across all webapps. Does anyone have any ide

Re: Single sign on issue with Tomcat and Apache

2008-06-05 Thread sridharmnj
e > Tomcat level, to pass this information back to Apache (and neither does > it need to be passed back to Apache, it should passed to the browser, > see below). > > Or, let me put this another way, there is no simple way, using just the > standard Apache and Tomcat configurati

Re: Single sign on issue with Tomcat and Apache

2008-06-05 Thread André Warnier
no simple way, using just the standard Apache and Tomcat configuration and standard add-on modules. If your client absolutely wants to keep the FORM authentication for aaa, and still wants to have a single-sign-on between the 3 areas aaa/ccc/bbb, then the other solution would be to change the a

RE: Single sign on issue with Tomcat and Apache

2008-06-05 Thread Caldarale, Charles R
> From: sridharmnj [mailto:[EMAIL PROTECTED] > Subject: Re: Single sign on issue with Tomcat and Apache > > Is it a better idea to move apache pages (bbb) into the > tomcat (ccc)? If you're not using httpd for anything other than serving static content, then yes, get rid of i

Re: Single sign on issue with Tomcat and Apache

2008-06-05 Thread sridharmnj
> Johnny Kewl wrote: >> >> - Original Message - From: "sridharmnj" <[EMAIL PROTECTED]> >> To: >> Sent: Thursday, June 05, 2008 4:33 PM >> Subject: Re: Single sign on issue with Tomcat and Apache >> >> >>> >>>

Re: Single sign on issue with Tomcat and Apache

2008-06-05 Thread André Warnier
Well, Johnny, we seem to agree.. Johnny Kewl wrote: - Original Message - From: "sridharmnj" <[EMAIL PROTECTED]> To: Sent: Thursday, June 05, 2008 4:33 PM Subject: Re: Single sign on issue with Tomcat and Apache Many thanks to all of you for responding to my problem

Re: Single sign on issue with Tomcat and Apache

2008-06-05 Thread sridharmnj
into aaa, (Tomcat-Form) after authentication, If >> I >> click a link to bbb (Apache-BASIC) again its poping up a window for >> username >> and password. >> >> This is (Scenario 4) what I need to change. When a user logs into aaa >> using >> To

Re: Single sign on issue with Tomcat and Apache

2008-06-05 Thread Pid
<[EMAIL PROTECTED]> To: "Tomcat Users List" Hi, I am integrating two websites using single sign on. I have two sites namely aaa.com and bbb.com. I enabled SingleSignOn valve in server.xml file, and trying to access Its not going to work... Its not because of TC, its because of

Re: Single sign on issue with Tomcat and Apache

2008-06-05 Thread Johnny Kewl
- Original Message - From: "sridharmnj" <[EMAIL PROTECTED]> To: Sent: Thursday, June 05, 2008 4:33 PM Subject: Re: Single sign on issue with Tomcat and Apache Many thanks to all of you for responding to my problem. I apologize, I hope I didnot mention my sys

Re: Single sign on issue with Tomcat and Apache

2008-06-05 Thread André Warnier
thout modifying the Apache Authencitation? I am really sorry if I am confusing you. Please let me know still if you need any other details. Thanks, Sridhar Pid-2 wrote: Johnny Kewl wrote: - Original Message - From: "Propes, Barry L " <[EMAIL PROTECTED]> To: "Tomcat Users

Re: Single sign on issue with Tomcat and Apache

2008-06-05 Thread sridharmnj
, Sridhar Pid-2 wrote: > > Johnny Kewl wrote: >> >> - Original Message - From: "Propes, Barry L " >> <[EMAIL PROTECTED]> >> To: "Tomcat Users List" >> >>> Hi, >>> I am integrating two websites usin

Re: Single sign on issue with Tomcat and Apache

2008-06-05 Thread Pid
Johnny Kewl wrote: - Original Message - From: "Propes, Barry L " <[EMAIL PROTECTED]> To: "Tomcat Users List" Hi, I am integrating two websites using single sign on. I have two sites namely aaa.com and bbb.com. I enabled SingleSignOn valve in serv

Re: Single sign on issue with Tomcat and Apache

2008-06-04 Thread Johnny Kewl
- Original Message - From: "André Warnier" <[EMAIL PROTECTED]> To: "Tomcat Users List" Sent: Thursday, June 05, 2008 2:54 AM Subject: Re: Single sign on issue with Tomcat and Apache Johnny Kewl wrote: - Original Message - From: "André

Re: Single sign on issue with Tomcat and Apache

2008-06-04 Thread André Warnier
Johnny Kewl wrote: - Original Message - From: "André Warnier" <[EMAIL PROTECTED]> To: Cc: <[EMAIL PROTECTED]> Sent: Thursday, June 05, 2008 1:06 AM Subject: RE: Single sign on issue with Tomcat and Apache Hi. I saw your ongoing discussion, and maybe I ca

Re: Single sign on issue with Tomcat and Apache

2008-06-04 Thread Johnny Kewl
- Original Message - From: "André Warnier" <[EMAIL PROTECTED]> To: Cc: <[EMAIL PROTECTED]> Sent: Thursday, June 05, 2008 1:06 AM Subject: RE: Single sign on issue with Tomcat and Apache Hi. I saw your ongoing discussion, and maybe I can contribute something,

RE: Single sign on issue with Tomcat and Apache

2008-06-04 Thread André Warnier
Hi. I saw your ongoing discussion, and maybe I can contribute something, but I need some more info before. Here is what you explained before : a) You have one site "aaa.com" to which users access this way : user ---> tomcat aaa.com b) and another site "bbb.com" t

Re: Single sign on issue with Tomcat and Apache

2008-06-04 Thread Johnny Kewl
- Original Message - From: "Propes, Barry L " <[EMAIL PROTECTED]> To: "Tomcat Users List" Hi, I am integrating two websites using single sign on. I have two sites namely aaa.com and bbb.com. I enabled SingleSignOn valve in server.xml file, and trying to

Re: Single sign on issue with Tomcat and Apache

2008-06-03 Thread David Smith
ty. Means, when I provide credentials in aaa.com (Tomcat Form based authentication) I should be able to navigate to bbb.com's apache pages. (anyhow I am able to access bbb.com's tomcat pages). I am sorry for lengthy message. But I tried to explain complete scenario. David Smith-2 wrote:

Re: Single sign on issue with Tomcat and Apache

2008-06-03 Thread sridharmnj
;> I >>> am not sure..this) and tomcat is using those credentials and not asking >>> for >>> authentication. >>> >>> >> Since Apache *Httpd* is using BASIC, and every request includes >> credentials, this is normal. Apache *Tomc

Re: Single sign on issue with Tomcat and Apache

2008-06-03 Thread sridharmnj
Since Apache *Httpd* is using BASIC, and every request includes > credentials, this is normal. Apache *Tomcat* would receive the same > credentials in the BASIC auth header. > >> I need the reverse functionality. Means, when I provide credentials in >> aaa.com (Tomcat Form

Re: Single sign on issue with Tomcat and Apache

2008-06-03 Thread David Smith
(Tomcat Form based authentication) I should be able to navigate to bbb.com's apache pages. (anyhow I am able to access bbb.com's tomcat pages). I am sorry for lengthy message. But I tried to explain complete scenario. David Smith-2 wrote: I'll first admit that I've ne

Re: Single sign on issue with Tomcat and Apache

2008-06-03 Thread sridharmnj
Smith-2 wrote: > > I'll first admit that I've never used single sign-on, so most of this is > educated conjecture on my part. Hopefully it'll spark some discussion > in the right direction. > > Your right -- jvm version is not going to make a difference with the

Re: Single sign on issue with Tomcat and Apache

2008-06-03 Thread David Smith
I'll first admit that I've never used single sign-on, so most of this is educated conjecture on my part. Hopefully it'll spark some discussion in the right direction. Your right -- jvm version is not going to make a difference with the issue you are seeing. Plus upgrading th

RE: Single sign on issue with Tomcat and Apache

2008-06-03 Thread sridharmnj
're stuck on Java 1.3.1 and cannot go forward? > > > -Original Message- > From: sridharmnj [mailto:[EMAIL PROTECTED] > Sent: Tuesday, June 03, 2008 4:17 PM > To: users@tomcat.apache.org > Subject: RE: Single sign on issue with Tomcat and Apache > > >

RE: Single sign on issue with Tomcat and Apache

2008-06-03 Thread Propes, Barry L
and you're stuck on Java 1.3.1 and cannot go forward? -Original Message- From: sridharmnj [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2008 4:17 PM To: users@tomcat.apache.org Subject: RE: Single sign on issue with Tomcat and Apache Apache 2.0.50 Tomcat 5.0.27 Java 1.3.1 P

RE: Single sign on issue with Tomcat and Apache

2008-06-03 Thread sridharmnj
Apache 2.0.50 Tomcat 5.0.27 Java 1.3.1 Propes, Barry L wrote: > > what versions are you using? Of each? > > -Original Message- > From: sridharmnj [mailto:[EMAIL PROTECTED] > Sent: Tuesday, June 03, 2008 3:52 PM > To: users@tomcat.apache.org > Subject: Single s

RE: Single sign on issue with Tomcat and Apache

2008-06-03 Thread Propes, Barry L
what versions are you using? Of each? -Original Message- From: sridharmnj [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2008 3:52 PM To: users@tomcat.apache.org Subject: Single sign on issue with Tomcat and Apache Hi, I am integrating two websites using single sign on. I have two

Single sign on issue with Tomcat and Apache

2008-06-03 Thread sridharmnj
Hi, I am integrating two websites using single sign on. I have two sites namely aaa.com and bbb.com. When a user navigates from aaa.com, as he is already authenticated in it, he should be allowed to bbb.com without asking the credentials again. This is my requirement. aaa.com is based on

Re: How to figure out if a user is authenticated when using single sign on?

2008-04-23 Thread Mark Thomas
FR wrote: The standard workaround mentioned is to place user information in session, but that won't work across webapps using Single Sign On. I have a bunch of webapps, only one of which is protected and requires login, the rest work fine without logging in, but display different inform

How to figure out if a user is authenticated when using single sign on?

2008-04-22 Thread FR
using Single Sign On. I have a bunch of webapps, only one of which is protected and requires login, the rest work fine without logging in, but display different information when the user is logged in. This worked great when getUserPrincipal returned a Principal on every URL after login, but I can

RE: Single Sign-On

2007-12-05 Thread Propes, Barry L
I think via a lookup to an LDAP reference, but you have to know that LDAP group from your administrator. -Original Message- From: Andrew Hole [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 05, 2007 11:52 AM To: Tomcat Users List Subject: Single Sign-On Hello everybody! I have two

Single Sign-On

2007-12-05 Thread Andrew Hole
Hello everybody! I have two applications: - J2EE Application on tomcat - Microsoft Navision How can I implement single sign-on integrated with Microsoft Active Directory? Microsoft Active Directory could be central autenthication service? Thanks

RE: Single Sign-On across multiple webapps

2007-09-23 Thread Caldarale, Charles R
> From: A Sunley [mailto:[EMAIL PROTECTED] > Subject: Single Sign-On across multiple webapps > > I'm experiencing some problems implementing SSO across two webapps. You make no mention of having read the Tomcat documentation for SSO, let alone enabling it: http://tomcat.apac

Single Sign-On across multiple webapps

2007-09-23 Thread A Sunley
nks for your time. Alan. -- View this message in context: http://www.nabble.com/Single-Sign-On-across-multiple-webapps-tf4505100.html#a12848283 Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topi

Re: Single-sign on without form-based authentication

2007-08-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lb, lightbulb432 wrote: > Anytime I want to use more than two credentials, I have to provide my > own Realm implementation. But the only time I need to do the String > concatentation is when at least one of the additional credentials > (i.e. beyond u

Re: Single-sign on without form-based authentication

2007-08-30 Thread lightbulb432
appId="application-1" /> > > Just make sure you have setAppId and getAppId methods on your Realm > implementation, and then use them when you build your SQL query to > verify a login. > > - -chris > -BEGIN PGP SIGNATURE- > Version: GnuPG

Re: Single-sign on without form-based authentication

2007-08-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lb, lightbulb432 wrote: > Views would definitely allow me to keep the two tables separate, but then I'd > have to authenticate against the two source tables separately (i.e. each > application would point to the source table rather than to the view).

Re: Single-sign on without form-based authentication

2007-08-30 Thread lightbulb432
dev.org > > iD8DBQFG1sVh9CaO5/Lv0PARAjCcAJ4gF601g5wChd1FQ1TodzPjKuQmpACgsEqq > nD8wKTUJVWYkc5eGnA/mXt8= > =FMuk > -END PGP SIGNATURE- > > - > To start a new topic, e-mail: users@tomcat.apache.org > To unsubscribe, e-mail: [EMAIL PROTECTED] > For addit

Re: Single-sign on without form-based authentication

2007-08-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lb, lightbulb432 wrote: > The requirement doesn't accept having two tables (i.e. userTableA and > userTableB), partly because increased maintenance, the possibility of table > definitions going out of sync, etc. CREATE VIEW, anyone? - -chris -B

Re: Single-sign on without form-based authentication

2007-08-29 Thread lightbulb432
to re-think the > design of your application. -- View this message in context: http://www.nabble.com/Single-sign-on-without-form-based-authentication-tf3805975.html#a12374143 Sent from the Tomcat - User mailing list archive at Nabble.com. --

Re: Single Sign On

2007-08-22 Thread Mark Montague
On Wed, Aug 22, 2007 07:00, "Andrew Hole" <[EMAIL PROTECTED]> wrote: Single sign on using valve is interesting, but is it possible use him if I have different application running in different tomcat instances? I think that only works with different applications under same

Re: Single Sign On

2007-08-22 Thread Edmund Urbani
Andrew Hole wrote: > Single sign on using valve is interesting, but is it possible use him if I > have different application running in different tomcat instances? > > I think that only works with different applications under same tomcat > instance. > > Thank you > You m

  1   2   >