Re: Migration from Tomcat6-Cluster to Tomcat7-Cluster: Digest Authentication problem

2015-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rainer, On 3/13/15 12:15 PM, Rainer Jung wrote: Am 13.03.2015 um 16:28 schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 3/12/15 1:13 PM, Mark Thomas wrote: On 12/03/2015 15:20, Sascha Skorupa wrote:

Tomcat7: debugging realms - a howto?

2015-03-13 Thread Graham Leggett
Hi all, I have a working realm installation using basic authentication, which I need to switch to client certificate authentication. Having done so it doesn’t work, I just get “forbidden”, with no indication of the error involved. Back in the day there was a simple “debug” flag that turned on

Re: Tomcat7: debugging realms - a howto?

2015-03-13 Thread Neven Cvetkovic
Graham, On Fri, Mar 13, 2015 at 3:02 PM, Graham Leggett minf...@sharp.fm wrote: Hi all, I have a working realm installation using basic authentication, which I need to switch to client certificate authentication. Having done so it doesn’t work, I just get “forbidden”, with no indication of

Re: Switching basic auth to client-cert with realms - how?

2015-03-13 Thread Neven Cvetkovic
Graham, On Fri, Mar 13, 2015 at 3:39 PM, Graham Leggett minf...@sharp.fm wrote: Hi all, I have a basic authentication setup that works great as below. login-config auth-methodBASIC/auth-method realm-namePatricia/realm-name /login-config

Re: Switching basic auth to client-cert with realms - how?

2015-03-13 Thread Neven Cvetkovic
Graham, On Fri, Mar 13, 2015 at 3:39 PM, Graham Leggett minf...@sharp.fm wrote: What doesn’t seem to fit is the realm definition - specifying userCredCol is marked as mandatory, but this is obviously not present with a client certificate. What do you specify in this field? You define the

Re: Switching basic auth to client-cert with realms - how?

2015-03-13 Thread Graham Leggett
On 13 Mar 2015, at 10:34 PM, Neven Cvetkovic neven.cvetko...@gmail.com wrote: What doesn’t seem to fit is the realm definition - specifying userCredCol is marked as mandatory, but this is obviously not present with a client certificate. What do you specify in this field? You define the

Re: Tomcat7: debugging realms - a howto?

2015-03-13 Thread Graham Leggett
On 13 Mar 2015, at 9:58 PM, Neven Cvetkovic neven.cvetko...@gmail.com wrote: Just to confirm, the 403 Forbidden page was rendered by Tomcat, not Apache HTTPD? Yes, it is branded tomcat and appears in the tomcat access log. I don't expect it is an Apache issue here - because you mentioned

Switching basic auth to client-cert with realms - how?

2015-03-13 Thread Graham Leggett
Hi all, I have a basic authentication setup that works great as below. login-config auth-methodBASIC/auth-method realm-namePatricia/realm-name /login-config !-- Security roles referenced by this web application -- security-role

Re: Tomcat7: debugging realms - a howto?

2015-03-13 Thread Neven Cvetkovic
Graham, On Fri, Mar 13, 2015 at 4:43 PM, Graham Leggett minf...@sharp.fm wrote: On 13 Mar 2015, at 9:58 PM, Neven Cvetkovic neven.cvetko...@gmail.com wrote: Just to confirm, the 403 Forbidden page was rendered by Tomcat, not Apache HTTPD? Yes, it is branded tomcat and appears in the

Re: Tomcat7: debugging realms - a howto?

2015-03-13 Thread Konstantin Kolinko
2015-03-13 23:43 GMT+03:00 Graham Leggett minf...@sharp.fm: On 13 Mar 2015, at 9:58 PM, Neven Cvetkovic neven.cvetko...@gmail.com wrote: Just to confirm, the 403 Forbidden page was rendered by Tomcat, not Apache HTTPD? Yes, it is branded tomcat and appears in the tomcat access log. I don't

Re: Switching basic auth to client-cert with realms - how?

2015-03-13 Thread Neven Cvetkovic
Graham, On Fri, Mar 13, 2015 at 4:49 PM, Graham Leggett minf...@sharp.fm wrote: On 13 Mar 2015, at 10:34 PM, Neven Cvetkovic neven.cvetko...@gmail.com wrote: What doesn’t seem to fit is the realm definition - specifying userCredCol is marked as mandatory, but this is obviously not

Re: Tomcat7: debugging realms - a howto?

2015-03-13 Thread Konstantin Kolinko
2015-03-13 22:02 GMT+03:00 Graham Leggett minf...@sharp.fm: Hi all, I have a working realm installation using basic authentication, which I need to switch to client certificate authentication. Having done so it doesn’t work, I just get “forbidden”, with no indication of the error involved.

Re: Windows authentication : outdated link

2015-03-13 Thread Konstantin Kolinko
2015-03-13 15:04 GMT+03:00 André Warnier a...@ice-sa.com: Hi. Errata : In the page http://tomcat.apache.org/tomcat-8.0-doc/windows-auth-howto.html#References (and also in the corresponding Tomcat 7 page), the link to Geronimo configuration for Windows authentication leads to :

Re: Issues with SSL to resolve poodle vulnerability

2015-03-13 Thread Daniel Mikusa
On Fri, Mar 13, 2015 at 10:17 AM, MICHELLE RENEE LARSON mr...@psu.edu wrote: We use a software called iDashboards it is tomcat running on windows I have installed an SSL and when you go to the site https://idashboards-dev.outreach.psu.edu/idashboards/ it shows that the SSL is installed and

Re: Issues with SSL to resolve poodle vulnerability

2015-03-13 Thread Kaydell Leavitt
Unsubscribe please. -- Kaydell kayd...@yahoo.com On Mar 13, 2015, at 8:17 AM, MICHELLE RENEE LARSON mr...@psu.edu wrote: We use a software called iDashboards it is tomcat running on windows I have installed an SSL and when you go to the site

Re: Form-based authentication breaks after upgrade to Tom 7.0.59

2015-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rop, On 3/12/15 7:10 PM, rop wrote: Hi Chris, Yes, we are applying salt before hashing (to prevent googling up many passwords from the hashes). Depending upon how you are storing the salt, you may be able to use Tomcat out of the box, now,

Windows authentication : outdated link

2015-03-13 Thread André Warnier
Hi. Errata : In the page http://tomcat.apache.org/tomcat-8.0-doc/windows-auth-howto.html#References (and also in the corresponding Tomcat 7 page), the link to Geronimo configuration for Windows authentication leads to :

Re: AW: Migration from Tomcat6-Cluster to Tomcat7-Cluster: Digest Authentication problem

2015-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 3/12/15 1:13 PM, Mark Thomas wrote: On 12/03/2015 15:20, Sascha Skorupa wrote: Hi, here: http://grokbase.com/t/tomcat/users/13bvsbwb8s/multiple-servers-and-digest-authentication the same problem is described and the recommended

Issues with SSL to resolve poodle vulnerability

2015-03-13 Thread MICHELLE RENEE LARSON
We use a software called iDashboards it is tomcat running on windows I have installed an SSL and when you go to the site https://idashboards-dev.outreach.psu.edu/idashboards/ it shows that the SSL is installed and you connect via https however when you go to an ssl checker it says no ssl if

Re: Issues with SSL to resolve poodle vulnerability

2015-03-13 Thread André Warnier
Kaydell Leavitt wrote: Unsubscribe please. 1) don't top post. 2) scroll down to the very bottom and read the fine instructions repeated in every message on this list. P.S. Duh ! -- Kaydell kayd...@yahoo.com On Mar 13, 2015, at 8:17 AM, MICHELLE RENEE LARSON mr...@psu.edu wrote: We

Re: Migration from Tomcat6-Cluster to Tomcat7-Cluster: Digest Authentication problem

2015-03-13 Thread Rainer Jung
Am 13.03.2015 um 16:28 schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 3/12/15 1:13 PM, Mark Thomas wrote: On 12/03/2015 15:20, Sascha Skorupa wrote: Hi, here: http://grokbase.com/t/tomcat/users/13bvsbwb8s/multiple-servers-and-digest-authentication

Re: Windows authentication : outdated link

2015-03-13 Thread Konstantin Kolinko
2015-03-13 15:13 GMT+03:00 Konstantin Kolinko knst.koli...@gmail.com: 2015-03-13 15:04 GMT+03:00 André Warnier a...@ice-sa.com: Hi. Errata : In the page http://tomcat.apache.org/tomcat-8.0-doc/windows-auth-howto.html#References (and also in the corresponding Tomcat 7 page), the link to