Janne is correct. You should not turn security off.

If you've configured a working JNDIRealm in Tomcat, then JSPWiki should pick up the container credentials automatically.

Andrew

On Jul 7, 2007, at 4:11 AM, Janne Jalkanen wrote:


On 7 Jul 2007, at 09:57, Thomas Blattner wrote:

Hello,

we use 2.2.33 in our current productive environment with container managed
security configuration.

I would like to upgrade to a more recent version, but the current stable and also 2.5.88, which I tested recently, don't work like expected for us.

Problem description:
We are using Active Directory as our user authentification system, therefore I put security=off in the props file and configure a JNDIRealm inside tomcat's
server.xml. I also removed the comments inside web.xml of JSPWiki.
So far everything works fine, when someone hit's the edit link he is asked to login, which also works. But after login the username inside JSPWiki is still "Guest". In our current productive 2.2.33 the windows user id is
displayed, which is expected.

Try NOT setting security=off (i.e. set jspwiki.security=jaas). Turning security off should be a last measure - we should be fine for most cases when you just uncomment the appropriate sections in web.xml.

/Janne
_______________________________________________
This is the Jspwiki-users mailing list, in which we discuss thestable release (even-numbered, 2.4.x, 2.6.x), and user- issues.For development discussion, please join jspwiki-dev.
http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
http://www.jspwiki.org/JSPWikiMailingList

_______________________________________________
This is the Jspwiki-users mailing list, in which we discuss the stable release (even-numbered, 2.4.x, 2.6.x), and user-issues. For development discussion, please join jspwiki-dev.
http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
http://www.jspwiki.org/JSPWikiMailingList

Reply via email to