Caldarale, Charles R wrote:
I wonder if the use of the UserDatabase resource is
hard-wired into the manager app somehow.
It's not; we use a JAASRealm for Tomcat 6.0.16 production, and the
manager app quite happily authenticates with that. All we changed in
server.xml and the manager's web.xml were the following:
I appreciate all the help you've given. Implementing a JAASRealm sounds
easy enough, although it will be a few days at least before I'll have
the time to write the LoginModule. Although it's good to know that
JAASRealm is working for 6.0.16 in your production environment, I'm not
100% sure it will work for me. AFAIK, JDBCRealm is working for 6.0.16 as
well, and I seem to have a manager-specific problem that prevents it
from working in my environment.
I just tried manager with Tomcat 5.5 (on a different system than my 6.0
Tomcat), and authentication works there with JDBCRealm, with the same
configuration I'm trying with 6.0. So either something needs to be
configured differently in 6.0, something is broken in 6.0, or I have
something wrong in my environment. Is anyone else using manager with
JDBCRealm in 6.0?
I'm pretty sure now that manager is not even trying to use the JDBCRealm
when I access it. I noticed that the prompt for my credentials says
"Enter username and password for 'Tomcat Manager Application'". When I
access my custom app, it says "Enter username and password for
'JDBCRealm'". So for some reason the manage app is not trying to use the
JDBCRealm. I've commented out the <resource-env-ref> element in web.xml
that was referencing the variable "users" mapped via the <ResouorceLink>
in the context.xml file, and I tried getting rid of the context.xml file
as well. I don't know what else I can do to make manager use JDBCRealm
just as my other apps do. They're configured exactly the same in
web.xml, there are no context.xml or manager.xml files in play, and
there is nothing in server.xml that is applied specifically to any of my
apps.
-Mark
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
