Konstantin, On Sat, Jul 5, 2014 at 3:26 PM, Konstantin Kolinko <knst.koli...@gmail.com> wrote: > You can either perform IP filtering in a Valve (that will be in the > pipeline before an Authenticator), or you can remove > security-constraint and implement authentication and authorization in > a filter (such as Security Filter, or using Spring Security framework) > . > http://wiki.apache.org/tomcat/AddOns#Filters
in search of something simpler than Spring Security I stumbled upon Apache Shiro. I quite like the way it is set up and it gets the job done. Perhaps you might want to add this to the 3rd party filters in the Wiki, too? --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org