-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Roger,
On 12/22/16 10:11 PM, Roger Marquis wrote: >>> I have a change-password form that must validate the current >>> user's password and am unable to find a Tomcat (8.0) method to >>> use for this. It's not in FormAuthenticator or any other class >>> I could find. Pointers would be appreciated. >> >> It's complicated, but you can do it. What exact version of Tomcat >> 8 are you running? > > 8.0.39 now but the plan is to update to 8.5 once this is > worked-out. On 12/29/16 10:07 AM, Roger Marquis wrote: > Do you know how much I should expect to pay someone to write this > method? Is it anything you'd be interested in writing and is it > something that shouldn't be open sourced? The code has already been written. http://people.apache.org/~schultz/ApacheCon%20NA%202016/Seamless%20Upgra des%20for%20Credential%20Security%20in%20Apache%20Tomcat.pdf Read the whole thing, but what you are really interested in starts on slide #29. I think that most useful things ought to be open-sourced. Feel free to make a donation to the ASF if you'd like. Hope that helps, - -chris -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJYZTL0AAoJEBzwKT+lPKRYgBcP/Aug5IXJ7PPcN5qA1OueYJ+V yuchvKmhCt3aomVc08Ldr9xBaopRKc2pEhAqQetqNDTPUamKObe7s0aCvBxoZXCc dKGf7Z1BizX8PmhId/ED7z7ylV3eEWDff3IjABB0dJAxz2JspK1Bpuhw7LU9dy7X AFberoh9qulvDINnkKX8AziPoGjiVUE9wyrDL6fwPS0/wRCquvN16RgJwDUjNrTg JokXsBSP3Fht3c2Rbqi9pIq7Ws40yVXUVOoCoOJIRCev4ECatlCM25jPVBMdYtbl glpctjH0FWF2REBs5cQB6zmELVtWZ3L02O0kpE7zkyLUjncbyxl516wb2aF1M/vK XGvm5eqyehYj/PJeqpa8AASs02L5C2awmnXLT9D32ltynB6rny7KhtyicoMwh6qG lhW/1Aonae5CtMqMHzEktWaNd1NDqsg4q1cFj6sIJgzuxLTEg13AcVvWAX+7eln9 LvEOcCt93LXqekcQvBgOzw5r4LjE0P57chShbFcBc0LlJ2so0JU7S9kX0BaIextt qNscse0BZXavWA4QVVNyh/lYJYZucXXRgD+qwaq9o1jrwn+LlFI5xgDPZ3LiOnnf QnsuZ1qw+C1Ncw3v436TxcS2BWJUElHZvuqEul+hrW3QGg6qwmey9Qk8wT/ldToE LrsG1aC2E2u8ke3K2k90 =wo79 -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
