Re: tomcat security authenticator

2012-06-28 Thread Konstantin Kolinko
2012/6/28 Komáromi, Zoltán komaromi.zol...@horticosoft.hu: Hi, I need to use custom authenticator, because a part of application is using container authentication, and unfortunately the usersernames in realm conflicts with usernames in application database. :( So I need, that if anibody is

Re: tomcat security authenticator

2012-06-28 Thread Komáromi , Zoltán
1. Why not a Realm? Because the authentication depends on session attribute, and I want to bypass the form if user is logged in. So is this correct? Valve className=hu.kozo.security.MyFormAuthenticator / The tomcat's doc says, that Java class name of the implementation to use. This MUST be set

Re: tomcat security authenticator

2012-06-28 Thread Jose María Zaragoza
2012/6/28 Komáromi, Zoltán komaromi.zol...@horticosoft.hu: 1. Why not a Realm? Because the authentication depends on session attribute, and I want to bypass the form if user is logged in. When I used Tomcat's realm to authenticate users , that was a issue than I missed : to access to session

Re: tomcat security authenticator

2012-06-28 Thread Kris Easter
I think, if I replace the FormAuthenticator with an descendant, it'll solve the problem. To extend FormAuthenticator is simple, but how can I make Tomcat to use it? I tested this out at one time but it was never placed in production. My terse notes, which might be leaving something out, on

RE: tomcat security authenticator

2012-06-28 Thread Martin Gainty
n'aura pas n'importe quel effet légalement obligatoire. Étant donné que les email peuvent facilement être sujets à la manipulation, nous ne pouvons accepter aucune responsabilité pour le contenu fourni. Subject: Re: tomcat security authenticator From: kris.eas...@colorado.edu To: users

Re: tomcat security authenticator

2012-06-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zoltán, On 6/28/12 4:08 AM, Komáromi, Zoltán wrote: 1. Why not a Realm? Because the authentication depends on session attribute, and I want to bypass the form if user is logged in. So is this correct? Valve