Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-17 Thread Nikhil
On Wed, Jul 16, 2008 at 8:06 PM, Rainer Jung [EMAIL PROTECTED] wrote: Thanks Rainer. If I want to explicitly pass an environment variable from the httpd to the tomcat, I am using the RequestHeader, JkEnvVar, Setenv but unable to have them as it is passed in the tomcat... how do I go about

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread André Warnier
Nikhil wrote: On Tue, Jul 15, 2008 at 6:35 PM, Rainer Jung [EMAIL PROTECTED] wrote: What do you expect to be the value of the 'REMOTE_USER' variable? Do you expoect something else, than what you get from request.getRemoteUser()? What do you mean by variable? Maybe an httpd environment

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Rainer Jung
Nikhil schrieb: On Tue, Jul 15, 2008 at 6:35 PM, Rainer Jung [EMAIL PROTECTED] wrote: What do you expect to be the value of the 'REMOTE_USER' variable? Do you expoect something else, than what you get from request.getRemoteUser()? What do you mean by variable? Maybe an httpd environment

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Nikhil
On Wed, Jul 16, 2008 at 2:52 PM, Rainer Jung [EMAIL PROTECTED] wrote: To repeat two of my questions: What do you expect to be the value of the 'REMOTE_USER' variable? Do you expect something else, than what you get from request.getRemoteUser()? After I understand that, we can find an

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Nikhil
I tried using both getAttribute methods and getHeaderNames/getHeaders methods but unfortunately the variables are set to null On Wed, Jul 16, 2008 at 2:01 PM, André Warnier [EMAIL PROTECTED] wrote: Nikhil wrote: On Tue, Jul 15, 2008 at 6:35 PM, Rainer Jung [EMAIL PROTECTED] wrote: What do

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Rainer Jung
Nikhil schrieb: On Wed, Jul 16, 2008 at 2:52 PM, Rainer Jung [EMAIL PROTECTED] wrote: To repeat two of my questions: What do you expect to be the value of the 'REMOTE_USER' variable? Do you expect something else, than what you get from request.getRemoteUser()? After I understand that, we

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Nikhil
Thanks for the explanation, Rainer. Fine, I am going with using the method only then... Regards, Nikhil On Wed, Jul 16, 2008 at 3:22 PM, Rainer Jung [EMAIL PROTECTED] wrote: Nikhil schrieb: On Wed, Jul 16, 2008 at 2:52 PM, Rainer Jung [EMAIL PROTECTED] wrote: To repeat two of my

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Nikhil
On Wed, Jul 16, 2008 at 3:22 PM, Rainer Jung [EMAIL PROTECTED] wrote: Nikhil schrieb: On Wed, Jul 16, 2008 at 2:52 PM, Rainer Jung [EMAIL PROTECTED] wrote: To repeat two of my questions: What do you expect to be the value of the 'REMOTE_USER' variable? Do you expect something else,

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Rainer Jung
Thanks Rainer. If I want to explicitly pass an environment variable from the httpd to the tomcat, I am using the RequestHeader, JkEnvVar, Setenv but unable to have them as it is passed in the tomcat... how do I go about that? While I am completely convinced to use getRemoteUser() method only for

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-15 Thread Nikhil
I am still not able to get this straight. Looking at the server.xml tells me there is a userDatabase resource that is looked which I may need to comment? Could you please confirm? I am posting my server.xml (tomcat-6.0.16) for thoroughness so I do not miss any points here : Please let me know if

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-15 Thread Nikhil
While I am at it, I found this interesting information from the jk_logs: [Tue Jul 15 12:57:40 2008] [20026:0001] [debug] jk_uri_worker_map.c (589): Attempting to map URI '/examples/jsp/rheaders.jsp' from 0 maps [Tue Jul 15 12:57:40 2008] [20026:0001] [debug]

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-15 Thread Rainer Jung
Nikhil schrieb: [Tue Jul 15 12:57:40 2008] [20026:0001] [debug] mod_jk.c (607): Service protocol=HTTP/1.1 method=GET host=(null) addr=149.77.175.155 name= is3.hyd.deshaw.com port=8080 auth=(null) user=(null) laddr=149.77.160.20raddr= 149.77.175.155 -- If noticed, auth=(null) and

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-15 Thread Nikhil
On Tue, Jul 15, 2008 at 2:23 PM, Rainer Jung [EMAIL PROTECTED] wrote: Nikhil schrieb: [Tue Jul 15 12:57:40 2008] [20026:0001] [debug] mod_jk.c (607): Service protocol=HTTP/1.1 method=GET host=(null) addr=149.77.175.155 name= is3.hyd.deshaw.com port=8080 auth=(null) user=(null)

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-15 Thread Rainer Jung
Thats right and clueful. Yes, I modifued my httpd.conf to include the webapp location that I was going through and it updated the remote user, I was able to use have the result now properly set from the request.getRemoteUser call. Fine. BUT, again, I was not able to pass the 'REMOTE_USER'

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-15 Thread Nikhil
On Tue, Jul 15, 2008 at 6:35 PM, Rainer Jung [EMAIL PROTECTED] wrote: What do you expect to be the value of the 'REMOTE_USER' variable? Do you expoect something else, than what you get from request.getRemoteUser()? What do you mean by variable? Maybe an httpd environment Variable? Precisely.

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Rainer Jung
Nikhil wrote: The remote user gets forwarded automatically, but in order to make Tomcat accept that info and not try to authenticate itself, you need to set tomcatAuthentication=false in the ajp connector element in server.xml. See also http://tomcat.apache.org/tomcat-6.0-doc/config/ajp.html

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Nikhil
On Mon, Jul 14, 2008 at 2:39 PM, Rainer Jung [EMAIL PROTECTED] wrote: First of all 5.5.12 is very outdated and also very early in the 5.5 release cycle. You need to add 'tomcatAuthentication=false' in the Connector element for your AJP connector. The connector you showed us above is - an

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Nikhil
On Mon, Jul 14, 2008 at 4:22 PM, Nikhil [EMAIL PROTECTED] wrote: On Mon, Jul 14, 2008 at 2:39 PM, Rainer Jung [EMAIL PROTECTED] wrote: First of all 5.5.12 is very outdated and also very early in the 5.5 release cycle. You need to add 'tomcatAuthentication=false' in the Connector element

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Rainer Jung
Nikhil wrote: On Mon, Jul 14, 2008 at 4:22 PM, Nikhil [EMAIL PROTECTED] wrote: On Mon, Jul 14, 2008 at 2:39 PM, Rainer Jung [EMAIL PROTECTED] wrote: First of all 5.5.12 is very outdated and also very early in the 5.5 release cycle. You need to add 'tomcatAuthentication=false' in the

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Nikhil
On Mon, Jul 14, 2008 at 5:00 PM, Rainer Jung [EMAIL PROTECTED] wrote: Again, the http connector is *not* what you need to edit, if you want to combine Tomcat with mod_jk or mod_proxy_ajp. It is the AJP connector. See my previous mail. You need to add tomcatAuthentication=false to that

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Nikhil
Rainer, I seem to have found a related link on this but this is really old pertaining to the older versions of Tomcat.. any suggestions please. http://marc.info/?t=10431829842r=1w=2

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Rainer Jung
Nikhil wrote: !-- Define an AJP 1.3 Connector on port 8009 -- Connector port=64089 enableLookups=false redirectPort=64083 tomcatAuthentication=false protocol=AJP/1.3 / OK After editing the change in the ajp connector, and restarting the tomcat, I still

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Nikhil
I tried out Tomcat6 too and added 'tomcatAuthentication=false' to the ajp connector but that still not work. :-( On Mon, Jul 14, 2008 at 7:15 PM, Nikhil [EMAIL PROTECTED] wrote: Rainer, I seem to have found a related link on this but this is really old pertaining to the older versions of

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Nikhil
On Mon, Jul 14, 2008 at 7:46 PM, Rainer Jung [EMAIL PROTECTED] wrote: Use request.getRemoteUser() HTH Rainer Thanks Rainer. I am now using Tomcat6(latest stable release) and configured the server.xml with ajp connector to use tomcatAuthentication=false and I am still getting the 'null'

tomcat, apache with mod_jk and mod_auth_kerb

2008-07-13 Thread Nikhil
Hi, I am using httpd v2.0.58 installed on a Solaris-10 system, also have mod_auth_kerb with proper kerberos infrastructure. I am hosting few new applications on tomcat and wanted to integrate with the kerberos but via the httpd as the front end. As in, the httpd will do the front-end kerberos

RE: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-13 Thread Caldarale, Charles R
From: Nikhil [mailto:[EMAIL PROTECTED] Subject: tomcat, apache with mod_jk and mod_auth_kerb I have earlier tried using the mod_rewrite module with proxy .. but that would ask me to enable the http connector port of the tomcat instance and will prompt to keep the spoofing chances wide open

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-13 Thread Rainer Jung
Hi Nikhil, Nikhil schrieb: I have no problems in using mod_jk but could not figure out the ways of passing the remote_user variable effectively to the tomcat instance would also desire to have a scalability that with a single httpd instance supporting the multiple tomcat instances (may be

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-13 Thread Nikhil
Not necessarily. You could configure address attribute of the Tomcat HTTP Connector to listen only on 127.0.0.1 if httpd is on the same system, or if on a different system, configure Tomcat's RemoteAddrValve to limit requests to just that system.

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-13 Thread Nikhil
The remote user gets forwarded automatically, but in order to make Tomcat accept that info and not try to authenticate itself, you need to set tomcatAuthentication=false in the ajp connector element in server.xml. See also http://tomcat.apache.org/tomcat-6.0-doc/config/ajp.html If you