IIS, Tomcat, JNDI and ActiveDirectory

2009-09-29 Thread Buchner, Joerg [T0I] (VW Sachsen)
Hi, i've got a Microsoft IIS 6.0 Webservice. Behind the IIS is an Apache Tomcat 5.5.26 (connected via ISAPI and AJP/1.3) protocoll. In the IIS Integrated Windows Authentication is enabled. On server.xml tomcatauthentication is set to false. Also o've configured a JNDI REALM: Realm

Re: IIS, Tomcat, JNDI and ActiveDirectory

2009-09-29 Thread André Warnier
Hi Joerg. The following remarks are more a question from me, than an answer to you. I am interested also in a real answer from someone who really knows.. Buchner, Joerg [T0I] (VW Sachsen) wrote: Hi, i've got a Microsoft IIS 6.0 Webservice. Behind the IIS is an Apache Tomcat 5.5.26 (connected

AW: IIS, Tomcat, JNDI and ActiveDirectory

2009-09-29 Thread Buchner, Joerg [T0I] (VW Sachsen)
Betreff: Re: IIS, Tomcat, JNDI and ActiveDirectory Hi Joerg. The following remarks are more a question from me, than an answer to you. I am interested also in a real answer from someone who really knows.. Buchner, Joerg [T0I] (VW Sachsen) wrote: Hi, i've got a Microsoft IIS 6.0 Webservice. Behind

Re: IIS, Tomcat, JNDI and ActiveDirectory

2009-09-29 Thread Peter Crowther
2009/9/29 Buchner, Joerg [T0I] (VW Sachsen) joerg.buch...@volkswagen.de: But the problem is an other: The SourceCodes (JSP/Servlets) are secured with NTFS rights on filesystem. (Windows Server 2003 x64) I've tried to secure the whole application with NTFS Rights, but the NTFS ACL does not

AW: IIS, Tomcat, JNDI and ActiveDirectory

2009-09-29 Thread Buchner, Joerg [T0I] (VW Sachsen)
-Ursprüngliche Nachricht- Von: peter.crowth...@googlemail.com [mailto:peter.crowth...@googlemail.com] Im Auftrag von Peter Crowther Gesendet: Dienstag, 29. September 2009 18:28 An: Tomcat Users List Betreff: Re: IIS, Tomcat, JNDI and ActiveDirectory 2009/9/29 Buchner, Joerg [T0I] (VW

Re: AW: IIS, Tomcat, JNDI and ActiveDirectory

2009-09-29 Thread André Warnier
Hi Joerg. To clear up a bit, you are talking about 2 distinct aspects : Authentication and Authorization. Authentication = to find out who the user is Authorization = when we know who the user is, determine if he has or not the authorization required to access some resource (in this case,