Re: Does SingleSignOn valve works for web apps deployed inside an .ear file?

[Luis Rodríguez Fernández]

Hi Romain,

Wow, that was fast, thanks!

Well, probably I am taking it too far away. I am testing it together with
another SSO valve, org.keycloak.adapters.saml.tomcat.SamlAuthenticatorValve
[1]. My idea would that once the user is authenticated by our SSO and
his/her java.security.Principal object are created, the next requests for
protected resources will not trigger the SSO authentication.

Just for the record: that keycloak valve works, but my problem is that one
of the modules declares / and has some
resources (/res, /Info, /search, etc..) that are shared with the rest of
the modules. Short-long-story: a good mess :)

Thanks for your prompt reaction!

Cheers,

Luis

[1]
https://www.keycloak.org/docs/latest/securing_apps/index.html#_saml-tomcat-adapter




El mié., 3 oct. 2018 a las 18:39, Romain Manni-Bucau ()
escribió:

> Hi Luis,
>
> yes, it relies on "local" storage accross webapps so it works.
>
> Romain Manni-Bucau
> @rmannibucau  |  Blog
>  | Old Blog
>  | Github <
> https://github.com/rmannibucau> |
> LinkedIn  | Book
> <
> https://www.packtpub.com/application-development/java-ee-8-high-performance
> >
>
>
> Le mer. 3 oct. 2018 à 18:37, Luis Rodríguez Fernández 
> a
> écrit :
>
> > Hello there,
> >
> > OS Version: CentOS Linux release 7.5.1804
> > (Core) 3.10.0-862.11.6.el7.x86_64
> > Server version: Apache Tomcat/8.5.32 (TomEE 7.0.5)
> >
> > I am deploying a (huge, sigh...) .ear file with multiple .war
> applications
> > on it. I was wondering if the good and
> > old "org.apache.catalina.authenticator.SingleSignOn" valve would work
> with
> > them.
> >
> > For the deployment I am copying the .ear file in an "apps" folder inside
> my
> > $CATALINA_BASE. My conf/tomee.xml looks like:
> >
> > 
> >
> >   
> > 
> >
> > Any thoughts on this?
> >
> > Thanks in advance,
> >
> > Luis
> >
> > --
> >
> > "Ever tried. Ever failed. No matter. Try Again. Fail again. Fail better."
> >
> > - Samuel Beckett
> >
>


-- 

"Ever tried. Ever failed. No matter. Try Again. Fail again. Fail better."

- Samuel Beckett

Re: Does SingleSignOn valve works for web apps deployed inside an .ear file?

[Romain Manni-Bucau]

Hi Luis,

yes, it relies on "local" storage accross webapps so it works.

Romain Manni-Bucau
@rmannibucau  |  Blog
 | Old Blog
 | Github  |
LinkedIn  | Book



Le mer. 3 oct. 2018 à 18:37, Luis Rodríguez Fernández  a
écrit :

> Hello there,
>
> OS Version: CentOS Linux release 7.5.1804
> (Core) 3.10.0-862.11.6.el7.x86_64
> Server version: Apache Tomcat/8.5.32 (TomEE 7.0.5)
>
> I am deploying a (huge, sigh...) .ear file with multiple .war applications
> on it. I was wondering if the good and
> old "org.apache.catalina.authenticator.SingleSignOn" valve would work with
> them.
>
> For the deployment I am copying the .ear file in an "apps" folder inside my
> $CATALINA_BASE. My conf/tomee.xml looks like:
>
> 
>
>   
> 
>
> Any thoughts on this?
>
> Thanks in advance,
>
> Luis
>
> --
>
> "Ever tried. Ever failed. No matter. Try Again. Fail again. Fail better."
>
> - Samuel Beckett
>