RE: Mapping role names to groups

2017-10-04 Thread Sebastian Trost
-Original Message- From: André Warnier (tomcat) [mailto:a...@ice-sa.com] Sent: Wednesday, October 04, 2017 11:14 AM To: users@tomcat.apache.org Subject: Re: Mapping role names to groups > On 04.10.2017 10:20, Sebastian Trost wrote: >> -Original Message- >> Fr

Re: Mapping role names to groups

2017-10-04 Thread tomcat
On 04.10.2017 10:20, Sebastian Trost wrote: -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Tuesday, October 03, 2017 4:10 PM To: Tomcat Users List <users@tomcat.apache.org> Subject: Re: Mapping role names to groups On 03/10/17 14:01, Sebastian Trost wrote:

Re: Mapping role names to groups

2017-10-04 Thread Mark Thomas
On 04/10/17 09:20, Sebastian Trost wrote: > -Original Message- > From: Mark Thomas [mailto:ma...@apache.org] > Sent: Tuesday, October 03, 2017 4:10 PM > To: Tomcat Users List <users@tomcat.apache.org> > Subject: Re: Mapping role names to groups > > On 03/1

RE: Mapping role names to groups

2017-10-04 Thread Sebastian Trost
-Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: Tuesday, October 03, 2017 4:10 PM To: Tomcat Users List <users@tomcat.apache.org> Subject: Re: Mapping role names to groups On 03/10/17 14:01, Sebastian Trost wrote: >> Hi! >> >> I was looking f

Re: Mapping role names to groups

2017-10-03 Thread Mark Thomas
On 03/10/17 14:01, Sebastian Trost wrote: > Hi! > > I was looking for a way to map security role names from tomcat to LDAP > groups. I found an old thread from August 2009 with the exact problem in > which Christopher Schultz recommended to write a servlet filter or valve to > do that. > >

RE: Mapping role names to groups

2009-08-06 Thread Mohamed Shah
I THINK ITS POSSIBLE. But when you are fine with weblogic is there any specific reason to use tomcat? -Original Message- From: Jason Royals [mailto:tomcat-mailingl...@fragstealers.com] Sent: Thursday, August 06, 2009 4:32 PM To: users@tomcat.apache.org Subject: Mapping role names to

Re: Mapping role names to groups

2009-08-06 Thread Tim Funk
Try adding this to web.xml (and IIUC - this is portable across all containers) security-role-ref role-nameusers/role-name role-linkSG-FooBar-Users/role-link /security-role-ref security-role-ref role-nameadmins/role-name role-linkSG-FooBar-Admins/role-link /security-role-ref

Re: Mapping role names to groups

2009-08-06 Thread Jason Royals
Thanks for the advice, but I think security-role-ref is only valid within the context of a servlet element though? As such, it wont work on JSP's or other resources that might do a request.isUserInRole(admin) but are not servlets themselves (such as filters and listeners). I'd also like to avoid

Re: Mapping role names to groups

2009-08-06 Thread André Warnier
Jason Royals wrote: Thanks for the advice, but I think security-role-ref is only valid within the context of a servlet element though? I have not checked, but are you sure ? Is it not at the level of the web-app ? If so, it would apply to everything belonging to that webapp, whether

Re: Mapping role names to groups

2009-08-06 Thread André Warnier
André Warnier wrote: Jason Royals wrote: Thanks for the advice, but I think security-role-ref is only valid within the context of a servlet element though? I have not checked, but are you sure ? Is it not at the level of the web-app ? If so, it would apply to everything belonging to that

Re: Mapping role names to groups

2009-08-06 Thread Jason Royals
Yep, well according to the XSD that I'm using http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd but also http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd, security-role-ref can only appear within a servlet definition. It could certainly help if it was directly under web-app, but it ain't allowed so

RE: Mapping role names to groups

2009-08-06 Thread Caldarale, Charles R
From: André Warnier [mailto:a...@ice-sa.com] Subject: Re: Mapping role names to groups More precisely, it seems from the Servlet Spec, that all which concerns AAA applies in fact to URLs and/or methods. It seems thus definitely independent from servlets, filters, jsps etc.. Except

Re: Mapping role names to groups

2009-08-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jason, On 8/6/2009 8:33 AM, Jason Royals wrote: Thanks for the advice, but I think security-role-ref is only valid within the context of a servlet element though? As such, it wont work on JSP's or other resources that might do a