Problems retrieving client certificates with mod_jk

2009-06-02 Thread Diego Manilla Suárez
Hi. I'm using client certificates in certain parts of my webapp. When I was using mod_proxy_ajp I could retrieve the client certificates from a request attribute: request.getAttribute(javax.servlet.request.X509Certificate); But now I've switched to mod_jk and I always get null. This is my

Re: Problems retrieving client certificates with mod_jk

2009-06-02 Thread Diego Manilla Suárez
OK, problem solved. I added SSLOptions +ExportCertData and now it's working again. Regards, Diego Diego Manilla Suárez escribió: Hi. I'm using client certificates in certain parts of my webapp. When I was using mod_proxy_ajp I could retrieve the client certificates from a request attribute

Tomcat hangs due to socket reads?

2009-03-18 Thread Diego Manilla Suárez
Hi everyone. I'm running Tomcat 5.0.30 + Apache 2.2.3 on a SuSE EL 10. After a few days running, the CPU load increases, until Tomcat is eating 99% of it, and I need to restart. The last time this happened, I executed jstack on the Tomcat VM, and I saw most of threads stacks are like this:

Re: Tomcat hangs due to socket reads?

2009-03-18 Thread Diego Manilla Suárez
/ ## Thanks for pointing that out. André Warnier escribió: Diego Manilla Suárez wrote: [...] Hi. No idea about your problem, but in the information you provide, you are showing the Apache connecting to port 8009 of Tomcat, but for Tomcat you are showing

Make two authentication schemes coexist on the same app

2008-02-11 Thread Diego Manilla Suárez
Hi. I have a web app with standard form authentication and a custom JDBCRealm. Now, I need to enable client certificate authentication, and be able to use both authentication mechanisms (certificates when the user sends them, and standard login form when he doesn't). I don't know if this is

Extra fields in form authentication

2007-08-30 Thread Diego Manilla Suárez
Hi. I need two extra fields in my login form, other than j_username and j_password. The problem is that these extra fields doesn't seem to be forwarded to the original requested URL. Right now I've implemented my own Authenticator, which extends