[ANN] Apache Tomcat 8.5.31 available

2018-05-04 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.31. Tomcat 8.x users should be using 8.5.x releases in preference to 8.0.x releases. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language,

client cert authentication

2018-05-04 Thread George Stanchev
I guess I am looking for some pointers how to approach a certain scenario from "the right way" of implementing it. Say you have a standard login form with user/pass edits and "Login" and "Smartcard" buttons. The "Login" button does Its obvious thing. The "Smartcard" button authenticates the user

[ANN] Apache Tomcat 9.0.8 available

2018-05-04 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.8. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.8 is a bugfix and featur

Re: Question on Tomcat clustering

2018-05-04 Thread Martin Knoblauch
Hi Louis, thanks. Yeah, currently the level is "INFO". I am a bit afraid of FINE/FINEST, fearing an overflow of messages that are to detailed. I had hoped for something on a higher severity - the event I am looking for is in the end an exception from the normal work. something noteworthy, not to

Re: Help with SPNEGO Pass-Through

2018-05-04 Thread Randy Oun
As an update, the override code worked. Thanks for the guidance. Here is the code we packaged in a jar and place in the server lib: package company.catalina.realm; import java.security.Principal; import org.apache.catalina.realm.GenericPrincipal; import org.apache.catalina.realm.NullRealm; pub

Re: tomcat9 j_security_check request.getRequestURI() incorrect after POST

2018-05-04 Thread Dirk Ooms
Thanks for fixing this. Happy to help. On 3 May 2018 at 21:31, Mark Thomas wrote: > On 03/05/18 20:17, Mark Thomas wrote: > > On 02/05/18 16:08, Dirk Ooms wrote: > >> Mark, > >> > >> you can reproduce it using the FormAuthentication example in the > >> examples (http://localhost:8080/examples/js