RE: Help: Windows Server on Linux Client
You don't need IIS to get rid of 8080. You need to shut down IIS and reconfigure server.xml to put tomcat on port 80. However, if you get rid of IIS, you can't possibly have domain login unless you want to write your own NTLM realm. -Original Message- From: Aris Javier [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 07, 2004 10:25 PM To: Tomcat Users List Subject: RE: Help: Windows Server on Linux Client but where to type [EMAIL PROTECTED] or foo\domain in linux? sorry im a newbie in linux... thanks! aris -Original Message- From: Benson Margulies [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 08, 2004 10:12 AM To: Tomcat Users List Subject: RE: Help: Windows Server on Linux Client The user can type [EMAIL PROTECTED] in as their user name to the basic auth box, and their domain password, or foo\domain. And then the IIS will cheerfully authenticate them to the domain. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Help: Windows Server on Linux Client
Now you have to turn on security in Tomcat. If you want to talk to the AD for this purpose, well, lots of luck. You will need a custom realm or to implement this by hand in your servlets. Once you have security enabled at all, the browser (on Linux or wherever) will pop up a 'basic auth' dialog, and the user can type in a domain-qualified name. Unless you want to use forms authentication, for which there are some packages that someone else can help you with. -Original Message- From: Aris Javier [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 08, 2004 12:10 AM To: Tomcat Users List Subject: RE: Help: Windows Server on Linux Client Thanks! I've got Tomcat to work on port 80 with IIS service disabled! The problem now is request.getRemoteUser() returns NULL? Before, when I'm integrating it with IIS, request.getRemoteUser() returns the login name of the user... I need to get the user's domain login name... afterwhich, I will use that login name to verify in Active Directory if he/she exists... you mentioned a login box appears when I hit a site with security...? how to make my site secured then? So sorry to cause you too much trouble.. im the only java programmer here.. =| Thanks again! aris -Original Message- From: Parsons Technical Services [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 08, 2004 12:34 PM To: Tomcat Users List Subject: Re: Help: Windows Server on Linux Client 1. Is IIS shutdown (Stop the service and disable it)? 2. Is Tomcat up and running? 3. http://localhost returns what? If you get the default start page there is a link to the manager. As for the login Benson is speaking of the authentication (login) box that appears when you hit a site with security. Doug - Original Message - From: Aris Javier [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Tuesday, December 07, 2004 11:16 PM Subject: RE: Help: Windows Server on Linux Client thanks Chuck! I've changed my server.xml to port 80 and disconnected IIS... but page cannot be displayed appeared...? http://server/myApp then, how to go to Tomcat web manager? http://server:80? aris -Original Message- From: Caldarale, Charles R [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 08, 2004 11:51 AM To: Tomcat Users List Subject: RE: Help: Windows Server on Linux Client From: Aris Javier [mailto:[EMAIL PROTECTED] Subject: RE: Help: Windows Server on Linux Client if I will not use IIS, how to remove 8080 in URL then? Tomcat's HTTP connector is configured in server.xml. By default, Tomcat ships with the port number set to 8080 so you can test without interfering with any HTTP server you might already have installed. Once you're ready to put Tomcat in production, change the 8080 in server.xml to 80. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Help: Windows Server on Linux Client
Hello! I already enabled Anonymous Access but to no success... =| I think the problem is in IIS ? because http://server:8080/myApp is working in linux but request.getRemoteUser() is null... well ofcourse, the user did not login inside the domain... how can a linux user login inside the domain? If I make use of realm, the problem is solved but my URL includes 8080 port number? I want to make 8080 disappear in linux... http 401 authentication problem occurs if I use http://server/myApp... still I cannot make use of realm because how to know I the client is using linux? Thanks! -Original Message- From: Parsons Technical Services [mailto:[EMAIL PROTECTED] Sent: Monday, December 06, 2004 11:55 AM To: Tomcat Users List Subject: Re: Help: Windows Server on Linux Client Aris, Do want the only people that use the app to be domain users? If so, then you will need to implement a different security system if users will be on non windows machines. One option is the authentication roles in Tomcat. Down side is that the database of users will have to be maintained separate from AD. Pro is the users do not have to be in AD. JDBCRealm Check out: http://jakarta.apache.org/tomcat/tomcat-5.0-doc/realm-howto.html Also look at: http://jakarta.apache.org/tomcat/faq/windows.html If you do not need to restrict the access to the application then enable the Anonymous access. Doug www.parsonstechnical.com - Original Message - From: Aris Javier [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Sunday, December 05, 2004 9:19 PM Subject: RE: Help: Windows Server on Linux Client Thanks for your reply Brad! Inside IIS (myApp virtual directory), I have disabled Anonymous access and checked integrated windows authentication... myApp gets the user domain login name first and verify in active directory if the user exists... if the user exists, then myApp will work.. if in linux, should I enable anonymous access ? I will also try url with 8080 port included and see if it works in linux... http://localhost:8080/myApp -Original Message- From: Brad Cobb [mailto:[EMAIL PROTECTED] Sent: Monday, December 06, 2004 10:06 AM To: Tomcat Users List Subject: RE: Help: Windows Server on Linux Client Hi, The server is Windows 2k (development pc) running tomcat 5.0.27 using jk2 connector to run on IIS... my web apps don't have problems on windows client... I would be looking at your IIS permissions. Are you using 'Anonymous Access' in IIS? It sounds like your Windows clients are actually authenticating under a domain account - not using the same Anonymous Access that Linux will try to use by default. If so, have you allocated the IUSR_servername account to your webapps directory through Windows Explorer? To confirm this - try un-integrating with IIS (temporarily) and see if the problem still happens. If not, then you know it's not a Tomcat issue. Brad Cobb - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Help: Windows Server on Linux Client
The user can type [EMAIL PROTECTED] in as their user name to the basic auth box, and their domain password, or foo\domain. And then the IIS will cheerfully authenticate them to the domain. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Help: Windows Server on Linux Client
With the Anonymous Access disabled, did it prompt for a login on Linux machines? If yes, then Benson has you covered. If not, then can you use Tomcat without IIS? Is there something that has to run on IIS? As for the JDBCRealm, it does not matter what the client is. Doug - Original Message - From: Aris Javier [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Tuesday, December 07, 2004 8:51 PM Subject: RE: Help: Windows Server on Linux Client Hello! I already enabled Anonymous Access but to no success... =| I think the problem is in IIS ? because http://server:8080/myApp is working in linux but request.getRemoteUser() is null... well ofcourse, the user did not login inside the domain... how can a linux user login inside the domain? If I make use of realm, the problem is solved but my URL includes 8080 port number? I want to make 8080 disappear in linux... http 401 authentication problem occurs if I use http://server/myApp... still I cannot make use of realm because how to know I the client is using linux? Thanks! -Original Message- From: Parsons Technical Services [mailto:[EMAIL PROTECTED] Sent: Monday, December 06, 2004 11:55 AM To: Tomcat Users List Subject: Re: Help: Windows Server on Linux Client Aris, Do want the only people that use the app to be domain users? If so, then you will need to implement a different security system if users will be on non windows machines. One option is the authentication roles in Tomcat. Down side is that the database of users will have to be maintained separate from AD. Pro is the users do not have to be in AD. JDBCRealm Check out: http://jakarta.apache.org/tomcat/tomcat-5.0-doc/realm-howto.html Also look at: http://jakarta.apache.org/tomcat/faq/windows.html If you do not need to restrict the access to the application then enable the Anonymous access. Doug www.parsonstechnical.com - Original Message - From: Aris Javier [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Sunday, December 05, 2004 9:19 PM Subject: RE: Help: Windows Server on Linux Client Thanks for your reply Brad! Inside IIS (myApp virtual directory), I have disabled Anonymous access and checked integrated windows authentication... myApp gets the user domain login name first and verify in active directory if the user exists... if the user exists, then myApp will work.. if in linux, should I enable anonymous access ? I will also try url with 8080 port included and see if it works in linux... http://localhost:8080/myApp -Original Message- From: Brad Cobb [mailto:[EMAIL PROTECTED] Sent: Monday, December 06, 2004 10:06 AM To: Tomcat Users List Subject: RE: Help: Windows Server on Linux Client Hi, The server is Windows 2k (development pc) running tomcat 5.0.27 using jk2 connector to run on IIS... my web apps don't have problems on windows client... I would be looking at your IIS permissions. Are you using 'Anonymous Access' in IIS? It sounds like your Windows clients are actually authenticating under a domain account - not using the same Anonymous Access that Linux will try to use by default. If so, have you allocated the IUSR_servername account to your webapps directory through Windows Explorer? To confirm this - try un-integrating with IIS (temporarily) and see if the problem still happens. If not, then you know it's not a Tomcat issue. Brad Cobb - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Help: Windows Server on Linux Client
im just using IIS to remove 8080 port number... with the help of jk2 connector... if I will not use IIS, how to remove 8080 in URL then? thanks! -Original Message- From: Parsons Technical Services [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 08, 2004 10:20 AM To: Tomcat Users List Subject: Re: Help: Windows Server on Linux Client With the Anonymous Access disabled, did it prompt for a login on Linux machines? If yes, then Benson has you covered. If not, then can you use Tomcat without IIS? Is there something that has to run on IIS? As for the JDBCRealm, it does not matter what the client is. Doug - Original Message - From: Aris Javier [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Tuesday, December 07, 2004 8:51 PM Subject: RE: Help: Windows Server on Linux Client Hello! I already enabled Anonymous Access but to no success... =| I think the problem is in IIS ? because http://server:8080/myApp is working in linux but request.getRemoteUser() is null... well ofcourse, the user did not login inside the domain... how can a linux user login inside the domain? If I make use of realm, the problem is solved but my URL includes 8080 port number? I want to make 8080 disappear in linux... http 401 authentication problem occurs if I use http://server/myApp... still I cannot make use of realm because how to know I the client is using linux? Thanks! -Original Message- From: Parsons Technical Services [mailto:[EMAIL PROTECTED] Sent: Monday, December 06, 2004 11:55 AM To: Tomcat Users List Subject: Re: Help: Windows Server on Linux Client Aris, Do want the only people that use the app to be domain users? If so, then you will need to implement a different security system if users will be on non windows machines. One option is the authentication roles in Tomcat. Down side is that the database of users will have to be maintained separate from AD. Pro is the users do not have to be in AD. JDBCRealm Check out: http://jakarta.apache.org/tomcat/tomcat-5.0-doc/realm-howto.html Also look at: http://jakarta.apache.org/tomcat/faq/windows.html If you do not need to restrict the access to the application then enable the Anonymous access. Doug www.parsonstechnical.com - Original Message - From: Aris Javier [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Sunday, December 05, 2004 9:19 PM Subject: RE: Help: Windows Server on Linux Client Thanks for your reply Brad! Inside IIS (myApp virtual directory), I have disabled Anonymous access and checked integrated windows authentication... myApp gets the user domain login name first and verify in active directory if the user exists... if the user exists, then myApp will work.. if in linux, should I enable anonymous access ? I will also try url with 8080 port included and see if it works in linux... http://localhost:8080/myApp -Original Message- From: Brad Cobb [mailto:[EMAIL PROTECTED] Sent: Monday, December 06, 2004 10:06 AM To: Tomcat Users List Subject: RE: Help: Windows Server on Linux Client Hi, The server is Windows 2k (development pc) running tomcat 5.0.27 using jk2 connector to run on IIS... my web apps don't have problems on windows client... I would be looking at your IIS permissions. Are you using 'Anonymous Access' in IIS? It sounds like your Windows clients are actually authenticating under a domain account - not using the same Anonymous Access that Linux will try to use by default. If so, have you allocated the IUSR_servername account to your webapps directory through Windows Explorer? To confirm this - try un-integrating with IIS (temporarily) and see if the problem still happens. If not, then you know it's not a Tomcat issue. Brad Cobb - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Help: Windows Server on Linux Client
but where to type [EMAIL PROTECTED] or foo\domain in linux? sorry im a newbie in linux... thanks! aris -Original Message- From: Benson Margulies [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 08, 2004 10:12 AM To: Tomcat Users List Subject: RE: Help: Windows Server on Linux Client The user can type [EMAIL PROTECTED] in as their user name to the basic auth box, and their domain password, or foo\domain. And then the IIS will cheerfully authenticate them to the domain. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Help: Windows Server on Linux Client
From: Aris Javier [mailto:[EMAIL PROTECTED] Subject: RE: Help: Windows Server on Linux Client if I will not use IIS, how to remove 8080 in URL then? Tomcat's HTTP connector is configured in server.xml. By default, Tomcat ships with the port number set to 8080 so you can test without interfering with any HTTP server you might already have installed. Once you're ready to put Tomcat in production, change the 8080 in server.xml to 80. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Help: Windows Server on Linux Client
thanks Chuck! I've changed my server.xml to port 80 and disconnected IIS... but page cannot be displayed appeared...? http://server/myApp then, how to go to Tomcat web manager? http://server:80? aris -Original Message- From: Caldarale, Charles R [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 08, 2004 11:51 AM To: Tomcat Users List Subject: RE: Help: Windows Server on Linux Client From: Aris Javier [mailto:[EMAIL PROTECTED] Subject: RE: Help: Windows Server on Linux Client if I will not use IIS, how to remove 8080 in URL then? Tomcat's HTTP connector is configured in server.xml. By default, Tomcat ships with the port number set to 8080 so you can test without interfering with any HTTP server you might already have installed. Once you're ready to put Tomcat in production, change the 8080 in server.xml to 80. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Help: Windows Server on Linux Client
1. Is IIS shutdown (Stop the service and disable it)? 2. Is Tomcat up and running? 3. http://localhost returns what? If you get the default start page there is a link to the manager. As for the login Benson is speaking of the authentication (login) box that appears when you hit a site with security. Doug - Original Message - From: Aris Javier [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Tuesday, December 07, 2004 11:16 PM Subject: RE: Help: Windows Server on Linux Client thanks Chuck! I've changed my server.xml to port 80 and disconnected IIS... but page cannot be displayed appeared...? http://server/myApp then, how to go to Tomcat web manager? http://server:80? aris -Original Message- From: Caldarale, Charles R [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 08, 2004 11:51 AM To: Tomcat Users List Subject: RE: Help: Windows Server on Linux Client From: Aris Javier [mailto:[EMAIL PROTECTED] Subject: RE: Help: Windows Server on Linux Client if I will not use IIS, how to remove 8080 in URL then? Tomcat's HTTP connector is configured in server.xml. By default, Tomcat ships with the port number set to 8080 so you can test without interfering with any HTTP server you might already have installed. Once you're ready to put Tomcat in production, change the 8080 in server.xml to 80. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Help: Windows Server on Linux Client
From: Aris Javier [mailto:[EMAIL PROTECTED] Subject: RE: Help: Windows Server on Linux Client I've changed my server.xml to port 80 and disconnected IIS... but page cannot be displayed appeared...? The first thing to try is a clean Tomcat install, updating server.xml to the desired port if needed. Verify that the Tomcat welcome page can be displayed, and that the sample applications operate correctly. Once that's done, then try deploying your app, carefully following the Tomcat how-to docs about deploying apps for your level (4.1, 5.0, and 5.5 all differ somewhat in configuration capabilities and deatils). then, how to go to Tomcat web manager? http://server:80? If you're using 5.5, you have to download and install the manager app; on earlier levels, it's included in the main download. Once installed, the manager is normally accessed by http://server[:port]/manager/html. If you've configured the port to be 80, you don't need to specify it, since that's the one a browser uses by default. Before you can use the default manager app, you must configure a userid and password for the manager role in the tomcat-users.xml file. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Help: Windows Server on Linux Client
Thanks! I've got Tomcat to work on port 80 with IIS service disabled! The problem now is request.getRemoteUser() returns NULL? Before, when I'm integrating it with IIS, request.getRemoteUser() returns the login name of the user... I need to get the user's domain login name... afterwhich, I will use that login name to verify in Active Directory if he/she exists... you mentioned a login box appears when I hit a site with security...? how to make my site secured then? So sorry to cause you too much trouble.. im the only java programmer here.. =| Thanks again! aris -Original Message- From: Parsons Technical Services [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 08, 2004 12:34 PM To: Tomcat Users List Subject: Re: Help: Windows Server on Linux Client 1. Is IIS shutdown (Stop the service and disable it)? 2. Is Tomcat up and running? 3. http://localhost returns what? If you get the default start page there is a link to the manager. As for the login Benson is speaking of the authentication (login) box that appears when you hit a site with security. Doug - Original Message - From: Aris Javier [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Tuesday, December 07, 2004 11:16 PM Subject: RE: Help: Windows Server on Linux Client thanks Chuck! I've changed my server.xml to port 80 and disconnected IIS... but page cannot be displayed appeared...? http://server/myApp then, how to go to Tomcat web manager? http://server:80? aris -Original Message- From: Caldarale, Charles R [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 08, 2004 11:51 AM To: Tomcat Users List Subject: RE: Help: Windows Server on Linux Client From: Aris Javier [mailto:[EMAIL PROTECTED] Subject: RE: Help: Windows Server on Linux Client if I will not use IIS, how to remove 8080 in URL then? Tomcat's HTTP connector is configured in server.xml. By default, Tomcat ships with the port number set to 8080 so you can test without interfering with any HTTP server you might already have installed. Once you're ready to put Tomcat in production, change the 8080 in server.xml to 80. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Help: Windows Server on Linux Client
thanks for your reply Doug... I find it really weird... I have tried to access my web app in linux using firefox... and it works! but in mozilla, konqueror in linux, authentication error occurred.. =| Anonymous Access is still disabled.. coz I only want domain users to access the app... I will try to read/study realm... so now I will have to maintain two user database? one Active Directory and one Realm? All of my users have accounts in active directory though... -Original Message- From: Parsons Technical Services [mailto:[EMAIL PROTECTED] Sent: Monday, December 06, 2004 11:55 AM To: Tomcat Users List Subject: Re: Help: Windows Server on Linux Client Aris, Do want the only people that use the app to be domain users? If so, then you will need to implement a different security system if users will be on non windows machines. One option is the authentication roles in Tomcat. Down side is that the database of users will have to be maintained separate from AD. Pro is the users do not have to be in AD. JDBCRealm Check out: http://jakarta.apache.org/tomcat/tomcat-5.0-doc/realm-howto.html Also look at: http://jakarta.apache.org/tomcat/faq/windows.html If you do not need to restrict the access to the application then enable the Anonymous access. Doug www.parsonstechnical.com - Original Message - From: Aris Javier [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Sunday, December 05, 2004 9:19 PM Subject: RE: Help: Windows Server on Linux Client Thanks for your reply Brad! Inside IIS (myApp virtual directory), I have disabled Anonymous access and checked integrated windows authentication... myApp gets the user domain login name first and verify in active directory if the user exists... if the user exists, then myApp will work.. if in linux, should I enable anonymous access ? I will also try url with 8080 port included and see if it works in linux... http://localhost:8080/myApp -Original Message- From: Brad Cobb [mailto:[EMAIL PROTECTED] Sent: Monday, December 06, 2004 10:06 AM To: Tomcat Users List Subject: RE: Help: Windows Server on Linux Client Hi, The server is Windows 2k (development pc) running tomcat 5.0.27 using jk2 connector to run on IIS... my web apps don't have problems on windows client... I would be looking at your IIS permissions. Are you using 'Anonymous Access' in IIS? It sounds like your Windows clients are actually authenticating under a domain account - not using the same Anonymous Access that Linux will try to use by default. If so, have you allocated the IUSR_servername account to your webapps directory through Windows Explorer? To confirm this - try un-integrating with IIS (temporarily) and see if the problem still happens. If not, then you know it's not a Tomcat issue. Brad Cobb - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Help: Windows Server on Linux Client
So to recap: On windows server you have disabled Anonymous access. Only Domain users are to be allowed. Windows using IE and Linux using Firefox work. Mozilla and konqueror do not. All of this with the browser hitting IIS on the front end. If this is correct, then the issue is with the browser and windows authentication and Tomcat is not involved. If you can't resolve this with the browsers then the realm model would be an option. There is a link on the FAQ: http://jcifs.samba.org/src/docs/ntlmhttpauth.html This deals with NTLM and would serve your needs, but will require SSL for security. It allows Tomcat to talk to the AD for user lookup. If I read it correctly. You may wish to post a new thread about authentication with Tomcat against Windows if you don't find anything in the archives as I am sure someone has done this. ... so now I will have to maintain two user database? one Active Directory and one Realm? Yes, if none of the other options listed will work for you. Sorry that I haven't been able to assist you more. Doug - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
FW: Help: Windows Server on Linux Client
Please Help! thanks very much! aris _ From: Aris Javier Sent: Friday, December 03, 2004 4:48 PM To: 'Tomcat Users List' Subject: Help: Windows Server on Linux Client Good Afternoon! I have this problem on linux clients... My web apps simply won't run on linux client... http: 401 authorization problem always shows up on mozilla in linux. The server is Windows 2k (development pc) running tomcat 5.0.27 using jk2 connector to run on IIS... my web apps don't have problems on windows client... please help! Thanks very much! aris mailto:[EMAIL PROTECTED]
RE: Help: Windows Server on Linux Client
Hi, The server is Windows 2k (development pc) running tomcat 5.0.27 using jk2 connector to run on IIS... my web apps don't have problems on windows client... I would be looking at your IIS permissions. Are you using 'Anonymous Access' in IIS? It sounds like your Windows clients are actually authenticating under a domain account - not using the same Anonymous Access that Linux will try to use by default. If so, have you allocated the IUSR_servername account to your webapps directory through Windows Explorer? To confirm this - try un-integrating with IIS (temporarily) and see if the problem still happens. If not, then you know it's not a Tomcat issue. Brad Cobb - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Help: Windows Server on Linux Client
Thanks for your reply Brad! Inside IIS (myApp virtual directory), I have disabled Anonymous access and checked integrated windows authentication... myApp gets the user domain login name first and verify in active directory if the user exists... if the user exists, then myApp will work.. if in linux, should I enable anonymous access ? I will also try url with 8080 port included and see if it works in linux... http://localhost:8080/myApp -Original Message- From: Brad Cobb [mailto:[EMAIL PROTECTED] Sent: Monday, December 06, 2004 10:06 AM To: Tomcat Users List Subject: RE: Help: Windows Server on Linux Client Hi, The server is Windows 2k (development pc) running tomcat 5.0.27 using jk2 connector to run on IIS... my web apps don't have problems on windows client... I would be looking at your IIS permissions. Are you using 'Anonymous Access' in IIS? It sounds like your Windows clients are actually authenticating under a domain account - not using the same Anonymous Access that Linux will try to use by default. If so, have you allocated the IUSR_servername account to your webapps directory through Windows Explorer? To confirm this - try un-integrating with IIS (temporarily) and see if the problem still happens. If not, then you know it's not a Tomcat issue. Brad Cobb - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Help: Windows Server on Linux Client
-Original Message- From: Aris Javier [mailto:[EMAIL PROTECTED] Sent: Monday, 6 December 2004 10:20 AM To: Tomcat Users List Subject: RE: Help: Windows Server on Linux Client Thanks for your reply Brad! no problems. Hope it helps. Inside IIS (myApp virtual directory), I have disabled Anonymous access and checked integrated windows authentication... if in linux, should I enable anonymous access ? Anonymous access is the easiest authentication method because, as the name suggests, it's anonymous. Therefore you're not checking any credentials - anyone that has the address would theoretically have access to your webapps. This works for both Linux and Windows (not that I've spent much time on Linux). If you need to authenticate users, then anonymous MAY not be the way to go. myApp gets the user domain login name first and verify in active directory if the user exists... if the user exists, then myApp will work.. You're approaching the limit of my knowledge here (I'm just a lowly support technician ;) ). Questions I would be asking: - Is your app getting the domain login name from IIS, or from the user's web browser? (If the web browser, then Anonymous Access in IIS should be ok.) - Does Mozilla for Windows work? (make sure it's not a browser compatibility problem) - Can you see any static content from your Linux PCs? (If so, then it shouldn't be a configuration issue). I will also try url with 8080 port included and see if it works in linux... http://localhost:8080/myApp Good. As above, also try a static link. (eg. http://localhost:8080/myApp/images/logo.gif ) I'm a bit of a noob with Tomcat (and this list) but I know a bit about IIS - so don't take my responses as absolutes. If anyone has differing opinions or corrections, feel free to raise them. :) Brad Cobb -Original Message- From: Brad Cobb [mailto:[EMAIL PROTECTED] Sent: Monday, December 06, 2004 10:06 AM To: Tomcat Users List Subject: RE: Help: Windows Server on Linux Client Hi, The server is Windows 2k (development pc) running tomcat 5.0.27 using jk2 connector to run on IIS... my web apps don't have problems on windows client... I would be looking at your IIS permissions. Are you using 'Anonymous Access' in IIS? It sounds like your Windows clients are actually authenticating under a domain account - not using the same Anonymous Access that Linux will try to use by default. If so, have you allocated the IUSR_servername account to your webapps directory through Windows Explorer? To confirm this - try un-integrating with IIS (temporarily) and see if the problem still happens. If not, then you know it's not a Tomcat issue. Brad Cobb - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: FW: Help: Windows Server on Linux Client
On Mon, Dec 06, 2004 at 09:20:26AM +0800, Aris Javier wrote: : http: 401 authorization problem always shows up on mozilla in linux. : : The server is Windows 2k (development pc) running tomcat 5.0.27 : using jk2 connector to run on IIS... my web apps don't have problems : on windows client... Try this as a debug measure: enable an HTTP connector on Tomcat, and try to access that directly from a Linux/Mozilla browser. Do you encounter this problem using Mozilla from another Windows machine? -QM -- software -- http://www.brandxdev.net tech news -- http://www.RoarNetworX.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Help: Windows Server on Linux Client
Aris, Do want the only people that use the app to be domain users? If so, then you will need to implement a different security system if users will be on non windows machines. One option is the authentication roles in Tomcat. Down side is that the database of users will have to be maintained separate from AD. Pro is the users do not have to be in AD. JDBCRealm Check out: http://jakarta.apache.org/tomcat/tomcat-5.0-doc/realm-howto.html Also look at: http://jakarta.apache.org/tomcat/faq/windows.html If you do not need to restrict the access to the application then enable the Anonymous access. Doug www.parsonstechnical.com - Original Message - From: Aris Javier [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Sunday, December 05, 2004 9:19 PM Subject: RE: Help: Windows Server on Linux Client Thanks for your reply Brad! Inside IIS (myApp virtual directory), I have disabled Anonymous access and checked integrated windows authentication... myApp gets the user domain login name first and verify in active directory if the user exists... if the user exists, then myApp will work.. if in linux, should I enable anonymous access ? I will also try url with 8080 port included and see if it works in linux... http://localhost:8080/myApp -Original Message- From: Brad Cobb [mailto:[EMAIL PROTECTED] Sent: Monday, December 06, 2004 10:06 AM To: Tomcat Users List Subject: RE: Help: Windows Server on Linux Client Hi, The server is Windows 2k (development pc) running tomcat 5.0.27 using jk2 connector to run on IIS... my web apps don't have problems on windows client... I would be looking at your IIS permissions. Are you using 'Anonymous Access' in IIS? It sounds like your Windows clients are actually authenticating under a domain account - not using the same Anonymous Access that Linux will try to use by default. If so, have you allocated the IUSR_servername account to your webapps directory through Windows Explorer? To confirm this - try un-integrating with IIS (temporarily) and see if the problem still happens. If not, then you know it's not a Tomcat issue. Brad Cobb - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Help: Windows Server on Linux Client
Good Afternoon! I have this problem on linux clients... My web apps simply won't run on linux client... http: 401 authorization problem always shows up on mozilla in linux. The server is Windows 2k (development pc) running tomcat 5.0.27 using jk2 connector to run on IIS... my web apps don't have problems on windows client... please help! Thanks very much! aris mailto:[EMAIL PROTECTED]
