-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 To whom it may concern,
On 1/23/12 2:54 PM, removeps-c...@yahoo.com wrote: > Sorry, I did not know about [LockOutRealm]. Will this class work > if you have many Tomcats on different machines (possibly load > balancing) so regardless of which exact machine the user is > directed to, lock realm will know the number of failed login > attempts on other machines? No, neither this nor any other Tomcat realms are cluster-aware. If you want to track authentication failures across a cluster, you could subclass LockOutRealm and override these methods: - - isLocked - - unlock - - registerAuthFailure This will allow you to handle the cluster-sync behavior separately from the authentication behavior which this class already handles. I'm interested in seeing what you come up with for communicating with the rest of the cluster. - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk8dv+4ACgkQ9CaO5/Lv0PDRnwCgvZFJvYXbU8Gwec6y430aD/rz Kk4An2C5ZwXZf4NEaS31A5CWngqGxI9F =zDyr -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
