Re: Pid OpenSSO request for Tomcat Form Authentication that requires no password for third party SSO

2011-01-30 Thread Pid *
On 28 Jan 2011, at 18:53, beau.hutche...@thomsonreuters.com beau.hutche...@thomsonreuters.com wrote: @Pid: The SSo third party app knows the SSO entry point into my Tomcat app. I am supplied an encrypted token which contains the username and my tomcat app has the libraries to unencrypt that

Re: Pid OpenSSO request for Tomcat Form Authentication that requires no password for third party SSO

2011-01-30 Thread André Warnier
It is more curiosity now on my part, but I have a couple of questions : Where does this SSO third-party app actually live ? Is it on another webserver which acts as a proxy to your Tomcat ? Or inside of Tomcat itself ? And you mention that you are supplied a token; how ? Is it in the form

Re: Pid OpenSSO request for Tomcat Form Authentication that requires no password for third party SSO

2011-01-28 Thread Pid
On 1/27/11 3:57 PM, beau.hutche...@thomsonreuters.com wrote: Chris: Thanks for your reply. Currently I am using Tomcat 6.0.29 @Pid: Would you have any ideas on how to set something up like this? What details are you providing to Tomcat? If I read the thread correctly you've got a single

Re: Pid OpenSSO request for Tomcat Form Authentication that requires no password for third party SSO

2011-01-28 Thread André Warnier
Pid wrote: On 1/27/11 3:57 PM, beau.hutche...@thomsonreuters.com wrote: Chris: Thanks for your reply. Currently I am using Tomcat 6.0.29 @Pid: Would you have any ideas on how to set something up like this? What details are you providing to Tomcat? If I read the thread correctly you've got

RE: Pid OpenSSO request for Tomcat Form Authentication that requires no password for third party SSO

2011-01-28 Thread beau.hutcheson
@Pid: The SSo third party app knows the SSO entry point into my Tomcat app. I am supplied an encrypted token which contains the username and my tomcat app has the libraries to unencrypt that token and unveil the username @Andre: Ideally it would seem most convenient to access j_security_check

RE: Pid OpenSSO request for Tomcat Form Authentication that requires no password for third party SSO

2011-01-27 Thread beau.hutcheson
Chris: Thanks for your reply. Currently I am using Tomcat 6.0.29 @Pid: Would you have any ideas on how to set something up like this? Beau -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Wednesday, January 26, 2011 6:30 PM To: Tomcat Users List

Re: Tomcat Form Authentication that requires no password for third party SSO

2011-01-27 Thread Filip Hanik - Dev Lists
You could implement your own authenticator, extending the class org.apache.catalina.authenticator.AuthenticatorBase https://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/java/org/apache/catalina/authenticator/AuthenticatorBase.java?view=markup protected abstract boolean authenticate(Request

RE: Tomcat Form Authentication that requires no password for third party SSO

2011-01-27 Thread beau.hutcheson
Filip: Thanks, I'll get going on my own authenticator right quick. Does tcserver come with something like this out of the box? Beau -Original Message- From: Filip Hanik - Dev Lists [mailto:devli...@hanik.com] Sent: Thursday, January 27, 2011 12:41 PM To: Tomcat Users List Subject: Re:

Re: Tomcat Form Authentication that requires no password for third party SSO

2011-01-27 Thread Filip Hanik - Dev Lists
There is a file called Authenticators.properties, in there it maps what you specify in web.xml, to a specific authenticator. So you write your own authenticator, you add an entry into this file, change web.xml with your new auth-method tc server does not come with something like this best

Re: Tomcat Form Authentication that requires no password for third party SSO

2011-01-27 Thread André Warnier
Hi. I think that you should be a bit more specific about the exact scheme below. Can you describe exactly, step by step, what happens just before and After successfully logging into the partner app, I will be redirected and only provided a username to log into my tomcat Form Authentication ?

Tomcat Form Authentication that requires no password for third party SSO

2011-01-26 Thread beau.hutcheson
Hello: I am trying to integrate my application with an SSO partner application. After successfully logging into the partner app, I will be redirected and only provided a username to log into my tomcat Form Authentication app. I am using a DataSourceRealm to check for both Users and User Roles.

Re: Tomcat Form Authentication that requires no password for third party SSO

2011-01-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Beau, On 1/26/2011 1:10 PM, beau.hutche...@thomsonreuters.com wrote: I am trying to integrate my application with an SSO partner application. What Tomcat version? I ask because Tomcat 7 includes the Servlet 3.0 programmatic login API. After