-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Konstantin,

On 6/25/14, 5:23 AM, Konstantin Kolinko wrote:
> 2014-06-24 21:09 GMT+04:00 Neeraj Sinha
> <neerajsinha....@gmail.com>:
>> I am using form based authentication (tomcat 7.0.34) and I have
>> the implementation of custom realm class which extends RealmBase
>> class. Inside the getPrincipal() method implementation, I am
>> calling backend service to save some login details. I need to
>> pass host name to backend (I have 2 applications running under
>> different hosts connected to same DB, so to know the login source
>> of user). Hosts are configured in server.xml.
>> 
>> Any help/links/URL much appreciated.
> 
> A Realm is just a DAO class used by Authenticator valves. The idea
> is that a Realm can be shared between web applications (by placing
> it at the Host or Engine level). If you want access to the request,
> you should implement an Authenticator.
> 
> There have been some discussions on changing APIs of
> Authenticators and Realms to be more friendly for extension, but
> nobody came up with a specific idea.

I have some code laying around for extending RealmBase to allow
changes to the password-derivation algorithm, but it wouldn't change
the public API of the Realm class in a way that wasn't
backward-compatible.

Changing Realm to include additional information (i.e. the request)
would break that API. I can't imagine we'd change that API for Tomcat
7 and it's getting pretty late for Tomcat 8 (8.0.9 was just voted
"stable").

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=JGaU
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to