Re: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-27 Thread André Warnier
Savoy, Melinda wrote: Let me ask another question if I might in addition to the one below: In my ISAPI log it shows: [Wed Jun 23 09:50:59.568 2010] [5024:6028] [debug] jk_isapi_plugin.c (3108): Service protocol=HTTP/1.1 method=GET host=127.0.0.1 addr=127.0.0.1 name=localhost port=80

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-27 Thread Savoy, Melinda
the ISAPI filter work. Regards. From: André Warnier [...@ice-sa.com] Sent: Sunday, June 27, 2010 15:55 To: Tomcat Users List Subject: Re: Still having problem retrieving user value from ISAPI Filter for authentication Savoy, Melinda wrote: Let me ask

Re: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-23 Thread Pid
On 23 Jun 2010, at 02:40, Rainer Jung rainer.j...@kippdata.de wrote: On 22.06.2010 21:59, Marc Boorshtein wrote: Unless you are going to authenticate via one of Tomcat's authentication methods; BASIC, FORM, etc, then getRemoteUser() is going to return null. You'll need to add a security

Re: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-23 Thread Rainer Jung
On 23.06.2010 09:51, Pid wrote: On 23 Jun 2010, at 02:40, Rainer Jungrainer.j...@kippdata.de wrote: On 22.06.2010 21:59, Marc Boorshtein wrote: Unless you are going to authenticate via one of Tomcat's authentication methods; BASIC, FORM, etc, then getRemoteUser() is going to return null.

RE: OT RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-23 Thread Savoy, Melinda
. -Original Message- From: Leo Donahue - PLANDEVX [mailto:leodona...@mail.maricopa.gov] Sent: Tuesday, June 22, 2010 6:13 PM To: 'Tomcat Users List' Subject: RE: OT RE: Still having problem retrieving user value from ISAPI Filter for authentication From: Leo Donahue - PLANDEVX

Re: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-23 Thread Pid
On 23/06/2010 10:45, Rainer Jung wrote: On 23.06.2010 09:51, Pid wrote: On 23 Jun 2010, at 02:40, Rainer Jungrainer.j...@kippdata.de wrote: On 22.06.2010 21:59, Marc Boorshtein wrote: Unless you are going to authenticate via one of Tomcat's authentication methods; BASIC, FORM, etc, then

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-23 Thread Savoy, Melinda
: Still having problem retrieving user value from ISAPI Filter for authentication On 23/06/2010 10:45, Rainer Jung wrote: On 23.06.2010 09:51, Pid wrote: On 23 Jun 2010, at 02:40, Rainer Jungrainer.j...@kippdata.de wrote: On 22.06.2010 21:59, Marc Boorshtein wrote: Unless you are going

Re: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-23 Thread Marc Boorshtein
On Wed, Jun 23, 2010 at 8:49 AM, Savoy, Melinda melindasa...@texashealth.org wrote: Let me ask, what maybe a stupid question now, but when I print out the enumeration value of the request header names, see below, using request.getHeaderNames() should the user be listed as one of the headers

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-23 Thread Savoy, Melinda
retrieving user value from ISAPI Filter for authentication On Wed, Jun 23, 2010 at 8:49 AM, Savoy, Melinda melindasa...@texashealth.org wrote: Let me ask, what maybe a stupid question now, but when I print out the enumeration value of the request header names, see below, using request.getHeaderNames

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-23 Thread Savoy, Melinda
I also tried request.getAttribute(user) but I got a null value as well. -Original Message- From: Savoy, Melinda Sent: Wednesday, June 23, 2010 8:09 AM To: 'Tomcat Users List' Subject: RE: Still having problem retrieving user value from ISAPI Filter for authentication I just tried

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-23 Thread Savoy, Melinda
' Subject: RE: Still having problem retrieving user value from ISAPI Filter for authentication Let me ask, what maybe a stupid question now, but when I print out the enumeration value of the request header names, see below, using request.getHeaderNames() should the user be listed as one

Re: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-23 Thread Rainer Jung
On 23.06.2010 16:58, Savoy, Melinda wrote: In my ISAPI log it shows: [Wed Jun 23 09:50:59.568 2010] [5024:6028] [debug] jk_isapi_plugin.c (3108): Service protocol=HTTP/1.1 method=GET host=127.0.0.1 addr=127.0.0.1 name=localhost port=80 auth=NTLM user=TEXAS\SavoyM uri=/index.jsp The value of

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Savoy, Melinda
My apologies. Let me try to ask my question in a more specific manner to see if I can get a response from someone on this list. Per the ISAPI log, I am getting to my index.jsp page successfully and I also am able to see the request info that is sent to the ISAPI filter from IIS. But when I try

Re: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Marc Boorshtein
I haven't tried this with IIS, but we had quite the discussion on this last week with Apache tomcat with JK. In your server.xml file add tomcatAuthentication=false to the AJP connector object. If you look in the archives of this list for JK_REMOTE_USER there is a very interesting discussion on

Re: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Pid
On 22/06/2010 13:05, Marc Boorshtein wrote: I haven't tried this with IIS, but we had quite the discussion on this last week with Apache tomcat with JK. In your server.xml file add tomcatAuthentication=false to the AJP connector object. If you look in the archives of this list for

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Savoy, Melinda
Boorshtein [mailto:mboorsht...@gmail.com] Sent: Tuesday, June 22, 2010 7:06 AM To: Tomcat Users List Subject: Re: Still having problem retrieving user value from ISAPI Filter for authentication I haven't tried this with IIS, but we had quite the discussion on this last week with Apache tomcat

Re: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Marc Boorshtein
On Tue, Jun 22, 2010 at 8:16 AM, Savoy, Melinda melindasa...@texashealth.org wrote: Thanks Marc.  I actually have that setting in my server.xml file as well. Hmm, I've only gotten the ISAPI filter working once and not in this context. Unless there are other ways to do this Pid's idea is

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Savoy, Melinda
what I'm doing wrong here. Again, any help is appreciated. Thanks. -Original Message- From: Pid [mailto:p...@pidster.com] Sent: Tuesday, June 22, 2010 7:11 AM To: Tomcat Users List Subject: Re: Still having problem retrieving user value from ISAPI Filter for authentication On 22/06/2010

Re: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Pid
I don't know what I'm doing wrong here. Again, any help is appreciated. Thanks. -Original Message- From: Pid [mailto:p...@pidster.com] Sent: Tuesday, June 22, 2010 7:11 AM To: Tomcat Users List Subject: Re: Still having problem retrieving user value from ISAPI Filter

Re: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Pid
7:11 AM To: Tomcat Users List Subject: Re: Still having problem retrieving user value from ISAPI Filter for authentication On 22/06/2010 13:05, Marc Boorshtein wrote: I haven't tried this with IIS, but we had quite the discussion on this last week with Apache tomcat with JK. In your

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Savoy, Melinda
. Thanks again. -Original Message- From: Pid [mailto:p...@pidster.com] Sent: Tuesday, June 22, 2010 7:53 AM To: 'Tomcat Users List' Subject: Re: Still having problem retrieving user value from ISAPI Filter for authentication On 22/06/2010 13:36, Savoy, Melinda wrote: Thanks Pid, I did

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Savoy, Melinda
'; 'p...@pidster.com' Subject: RE: Still having problem retrieving user value from ISAPI Filter for authentication We have a custom filter that we're using because after we get the request and response info then I need to use the user value info and get the user also authenticated against a legacy

Re: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Rainer Jung
On 22.06.2010 14:16, Savoy, Melinda wrote: Thanks Marc. I actually have that setting in my server.xml file as well. Actually I did follow your post last week thinking that would help me but the ISAPI filter is working properly as indicated in my log and IIS has authenticated the info

Re: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Pid
To: 'Tomcat Users List' Subject: Re: Still having problem retrieving user value from ISAPI Filter for authentication On 22/06/2010 13:36, Savoy, Melinda wrote: Thanks Pid, I did do that as well, but I did not see the user value there either. Here is what I got when I did issue

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Savoy, Melinda
value. Pid suggested using a Base64Decoder but I thought the ISAPI filter would provide that for me. Thanks. -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Tuesday, June 22, 2010 8:16 AM To: Tomcat Users List Subject: Re: Still having problem retrieving user

Re: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Pid
if that is indeed true? Thanks. -Original Message- From: Savoy, Melinda Sent: Tuesday, June 22, 2010 7:59 AM To: 'Tomcat Users List'; 'p...@pidster.com' Subject: RE: Still having problem retrieving user value from ISAPI Filter for authentication We have a custom filter that we're

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Savoy, Melinda
, June 22, 2010 7:53 AM To: 'Tomcat Users List' Subject: Re: Still having problem retrieving user value from ISAPI Filter for authentication On 22/06/2010 13:36, Savoy, Melinda wrote: Thanks Pid, I did do that as well, but I did not see the user value there either. Here is what I got when I

Re: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Pid
...@pidster.com] Sent: Tuesday, June 22, 2010 7:53 AM To: 'Tomcat Users List' Subject: Re: Still having problem retrieving user value from ISAPI Filter for authentication On 22/06/2010 13:36, Savoy, Melinda wrote: Thanks Pid, I did do that as well, but I did not see the user value there either

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Savoy, Melinda
List Subject: Re: Still having problem retrieving user value from ISAPI Filter for authentication On 22/06/2010 13:59, Savoy, Melinda wrote: We have a custom filter that we're using because after we get the request and response info then I need to use the user value info and get the user

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Martin Gainty
From: melindasa...@texashealth.org To: users@tomcat.apache.org; p...@pidster.com Date: Tue, 22 Jun 2010 08:45:18 -0500 Subject: RE: Still having problem retrieving user value from ISAPI Filter for authentication We had been working with JCIFS and chose the Tomcat Connector for IIS

Re: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Rainer Jung
On 22.06.2010 16:18, Savoy, Melinda wrote: Thanks Pid. That is what I'm working on right now. I am in the middle of the Decoder part of the code again. My apologies to this list as I understood I could get that directly from the ISAPI filter as it would decrypt it for me, which it does per

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Terence M. Bandoian
: Tuesday, June 22, 2010 7:11 AM To: Tomcat Users List Subject: Re: Still having problem retrieving user value from ISAPI Filter for authentication On 22/06/2010 13:05, Marc Boorshtein wrote: I haven't tried this with IIS, but we had quite the discussion on this last week with Apache tomcat

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Savoy, Melinda
- From: Terence M. Bandoian [mailto:tere...@tmbsw.com] Sent: Tuesday, June 22, 2010 12:40 PM To: Tomcat Users List Subject: RE: Still having problem retrieving user value from ISAPI Filter for authentication Hi, Melinda- As Pid suggested, the first part of that string after NTLM

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Savoy, Melinda
- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Tuesday, June 22, 2010 12:19 PM To: Tomcat Users List Subject: Re: Still having problem retrieving user value from ISAPI Filter for authentication On 22.06.2010 16:18, Savoy, Melinda wrote: Thanks Pid. That is what I'm working on right now

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Terence M. Bandoian
Subject: RE: Still having problem retrieving user value from ISAPI Filter for authentication Hi, Melinda- As Pid suggested, the first part of that string after NTLM in the authorization header decodes in base64 to 'NTLMSSP'. -Terence Bandoian Savoy, Melinda wrote: Thanks Pid, I did do

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Savoy, Melinda
List Subject: RE: Still having problem retrieving user value from ISAPI Filter for authentication Hi, Melinda- I'm not sure it's going to be that easy. From what I've read, the NTLM authorization header includes structured data that is encoded using a server nonce and/or the password. However

Re: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Rainer Jung
On 22.06.2010 21:29, Savoy, Melinda wrote: That is definitely the preferred method and the reason for going to the Tomcat Connector for this authentication process. However, even with the most simple implementation of my index.jsp and web.xml file I cannot get the getRemoteUser() to work. I

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Savoy, Melinda
/ -- /Host /Engine /Service /Server -Original Message- From: Rainer Jung [mailto:rainer.j...@kippdata.de] Sent: Tuesday, June 22, 2010 2:48 PM To: Tomcat Users List Subject: Re: Still having problem retrieving user value from ISAPI Filter for authentication On 22.06.2010 21:29

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Leo Donahue - PLANDEVX
From: Savoy, Melinda [mailto:melindasa...@texashealth.org] Subject: RE: Still having problem retrieving user value from ISAPI Filter for authentication What I did was comment out the filter from the web.xml and I went straight from the IE browser (http://localhost/index.jsp) to the index.jsp page

Re: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Marc Boorshtein
Unless you are going to authenticate via one of Tomcat's authentication methods; BASIC, FORM, etc, then getRemoteUser() is going to return null. You'll need to add a security constraint, login-config and security-role to your web.xml to test getRemoteUser(); in just Tomcat. This

RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Savoy, Melinda
PM To: Tomcat Users List Subject: Re: Still having problem retrieving user value from ISAPI Filter for authentication Unless you are going to authenticate via one of Tomcat's authentication methods; BASIC, FORM, etc, then getRemoteUser() is going to return null. You'll need to add a security

OT RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Leo Donahue - PLANDEVX
From: Marc Boorshtein [mailto:mboorsht...@gmail.com] Subject: Re: Still having problem retrieving user value from ISAPI Filter for authentication Unless you are going to authenticate via one of Tomcat's authentication methods; BASIC, FORM, etc, then getRemoteUser() is going to return null

RE: OT RE: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Leo Donahue - PLANDEVX
From: Leo Donahue - PLANDEVX [mailto:leodona...@mail.maricopa.gov] Subject: OT RE: Still having problem retrieving user value from ISAPI Filter for authentication Doesn't the url mapping in the uriworkermap.properties file interrupt IIS from passing authentication to Tomcat? If you restrict

Re: Still having problem retrieving user value from ISAPI Filter for authentication

2010-06-22 Thread Rainer Jung
On 22.06.2010 21:59, Marc Boorshtein wrote: Unless you are going to authenticate via one of Tomcat's authentication methods; BASIC, FORM, etc, then getRemoteUser() is going to return null. You'll need to add a security constraint, login-config and security-role to your web.xml to test