Re: IIS 10.0 as Tomcat reverse proxy does not send auth_type and remote_user AJP heder

2021-07-19 Thread Paolo Clerici
Hi Mark, Today I finally managed to solve the problem. The problem was due to the fact that Windows Authentication was enabled only at the level of the "s2wweb" virtual folder and not at the level of the "Jackarta Connector" virtual folder (at the same level as "s2wweb"). Thanks for the support and

Re: IIS 10.0 as Tomcat reverse proxy does not send auth_type and remote_user AJP heder

2021-07-19 Thread Mark Thomas
On 19/07/2021 10:20, Mark Thomas wrote: On 13/07/2021 16:35, Paolo Clerici wrote: I don't see any ISAPI redirector set up there. I was expecting to see something like the steps described here: http://tomcat.apache.org/connectors-doc/webserver_howto/iis.html Yes, if I have not missed something,

Re: IIS 10.0 as Tomcat reverse proxy does not send auth_type and remote_user AJP heder

2021-07-19 Thread Mark Thomas
On 13/07/2021 16:35, Paolo Clerici wrote: I don't see any ISAPI redirector set up there. I was expecting to see something like the steps described here: http://tomcat.apache.org/connectors-doc/webserver_howto/iis.html Yes, if I have not missed something, I think I have done everything that is wr

Re: IIS 10.0 as Tomcat reverse proxy does not send auth_type and remote_user AJP heder

2021-07-16 Thread Paolo Clerici
> Sorry, I haven't read the whole thread, but a basic question : > In the tomcat AJP Connector configuration, is "tomcatAuthentication" set to > "no" ? tomcatAuthentication is disabled (see configuration below) The same Tomcat instance with an IIS 6.1 as a reverse proxy works fine. Thanks, Pao

Re: IIS 10.0 as Tomcat reverse proxy does not send auth_type and remote_user AJP heder

2021-07-15 Thread tomcat/perl
Sorry, I haven't read the whole thread, but a basic question : In the tomcat AJP Connector configuration, is "tomcatAuthentication" set to "no" ? https://tomcat.apache.org/tomcat-9.0-doc/config/ajp.html#Common_Attributes On 13.07.2021 17:35, Paolo Clerici wrote: I don't see any ISAPI redirector

Re: IIS 10.0 as Tomcat reverse proxy does not send auth_type and remote_user AJP heder

2021-07-13 Thread Paolo Clerici
> I don't see any ISAPI redirector set up there. I was expecting to see > something like the steps described here: > http://tomcat.apache.org/connectors-doc/webserver_howto/iis.html Yes, if I have not missed something, I think I have done everything that is written in the document. The only differe

Re: IIS 10.0 as Tomcat reverse proxy does not send auth_type and remote_user AJP heder

2021-07-13 Thread Mark Thomas
On 13/07/2021 12:29, Paolo Clerici wrote: Hi Mark, How did you set up the s2wweb virtual directory? Physical Path: C:\Apache Software Foundation\virtual\test\s2wweb Physical Path Credential: blank Physical Path Credential Logon Type: Clear Text Virtual Path: /s2wweb Pass-through authentication

Re: IIS 10.0 as Tomcat reverse proxy does not send auth_type and remote_user AJP heder

2021-07-13 Thread Paolo Clerici
Hi Mark, > How did you set up the s2wweb virtual directory? Physical Path: C:\Apache Software Foundation\virtual\test\s2wweb Physical Path Credential: blank Physical Path Credential Logon Type: Clear Text Virtual Path: /s2wweb Pass-through authentication: / Connect As: / Path credentials: Applicat

Re: IIS 10.0 as Tomcat reverse proxy does not send auth_type and remote_user AJP heder

2021-07-13 Thread Mark Thomas
On 13/07/2021 08:49, Paolo Clerici wrote: Hi Mark, Are you connecting from a machine that isn't part of the Windows AD? I have tried both from PCs connected to AD and from PCs not connected to AD. Normally, I'd expect authentication to work without any password prompt. If I connect from PC

Re: IIS 10.0 as Tomcat reverse proxy does not send auth_type and remote_user AJP heder

2021-07-13 Thread Paolo Clerici
Hi Mark, > Are you connecting from a machine that isn't part of the Windows AD? I have tried both from PCs connected to AD and from PCs not connected to AD. > Normally, I'd expect authentication to work without any password prompt. If I connect from PC AD I am not asked for credentials (correct).

Re: IIS 10.0 as Tomcat reverse proxy does not send auth_type and remote_user AJP heder

2021-07-12 Thread Mark Thomas
On 12/07/2021 07:21, Paolo Clerici wrote: Hi Mark, 1) Start the Internet Information Services (IIS) Manager. 2) Locate and select site "test" in the IIS tree. 3) Double-click the Authentication icon. 4) Select Windows Authentication. 5) Click Enable in the Actions menu. 6) Restart IIS When I req

Re: IIS 10.0 as Tomcat reverse proxy does not send auth_type and remote_user AJP heder

2021-07-11 Thread Paolo Clerici
Hi Mark, 1) Start the Internet Information Services (IIS) Manager. 2) Locate and select site "test" in the IIS tree. 3) Double-click the Authentication icon. 4) Select Windows Authentication. 5) Click Enable in the Actions menu. 6) Restart IIS When I request the resource "https://qa-b2b.dasitgroup

Re: IIS 10.0 as Tomcat reverse proxy does not send auth_type and remote_user AJP heder

2021-07-09 Thread Mark Thomas
On 09/07/2021 16:59, Paolo Clerici wrote: I use IIS 10.0 as a reverse proxy of Tomcat 7. IIS 10.0 use Windows Authentication. When I run the javax.servlet.http.HttpServletRequest.getAuthType() method I get the null value. When I run the javax.servlet.http.HttpServletRequest.getRemoteUser() method