Question about Gridmap based authorization and authentication in Tomcat

[Neha Sharma]

Hi

My Tomcat Version:
Server version: Apache Tomcat/6.0.16
Server built:   Jan 28 2008 11:35:29
Server number:  6.0.16.0
OS Name:        Linux
OS Version:     2.6.9-55.0.2.ELsmp
Architecture:   i386
JVM Version:    1.5.0_14-b03
JVM Vendor:     Sun Microsystems Inc.
[EMAIL PROTECTED] apache-tomcat-6.0.16]#

I have deployed a web application using apache tomcat and further  
configured tomcat to allow gridmap-file based authorization and  
authentication. I did this by  inserting following tags in   
$TOMCAT_HOME/conf/server.xml file

    <Connector
            className="org.globus.tomcat.coyote.net.HTTPSConnector"
            port="8450"
            maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
            enableLookups="false" disableUploadTimeout="true"
            acceptCount="100" debug="0" scheme="https" autoFlush="true"
             
protocolHandlerClassName="org.apache.coyote.http11.Http11Protocol"
             
socketFactory 
="org.globus.tomcat.catalina.net.BaseHTTPSServerSocketFactory"
            cert="/etc/grid-security/hostcert.pem"
            key="/etc/grid-security/hostkey.pem"
            cacertdir="/etc/grid-security/certificates"
            mode="ssl"/>

    <Valve
           
className="org.globus.tomcat.coyote.valves.GridmapFilterValve55"
          gridmapfile="/usr/local/sazui/gridmap-file"
          allowUnsecured="false"
          meaningfulErrors="true"
          passRequest="false"
     />

Things are working as expected for the users whose DN (Distinguished  
Name) exists in the gridmap-file.

However, if anyone else whose DN is not in the gridmap-file  tries to  
access the page, they get a blank white screen.

Is there a way to display a webpage with a message like "Access  
Denied" instead of just throwing a blank screen ?

Thanks
-Neha

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]