tomcat-5.0.27 authentication/authorization

2005-01-29 Thread mate markovic
Hi. You can find discusion here: http://groups-beta.google.com/group/comp.lang.java.programmer tomcat-5.0.27 authentication/authorization http://groups-beta.google.com/group/comp.lang.java.programmer/browse_thread/thread/d86b1db12a57638d/1532ba9c63e42da3?q=tomcat-5.0.27+authentication

JK / JK2 and IIS6 Authentication Problem solved

2005-01-28 Thread Robert Oschwald
, not JK2 (JK2 is EndOfLive anyway. We dindn't manage to get authentication to be passed through JK2) - Disable JMXBeans support in server.xml - Disable the Cojote/AJP13 connector in server.xml - Enable the AJP13 connector in server.xml - In IIS6 manager, Enable basic authentication in the jakarta

Re: Basic Authentication Window

2005-01-28 Thread Larry Meadors
If you are using basic authentication, that is out of your control - the browser will resend the authentication with every request. I does not care at all about your session. I think your simplest solution is to switch to form-based authentication. Larry On Thu, 27 Jan 2005 19:58:16 -0800 (PST

RE: IIS, Tomcat and NTLM Authentication

2005-01-28 Thread Sue Roe
PROTECTED] Sent: 27 January 2005 11:30 To: Tomcat Users List Subject: RE: IIS, Tomcat and NTLM Authentication Sorry! just noticed you are not moving to TC 5. Perhaps this does not solve your problem afterall. -Original Message- From: Allistair Crossley Sent: 27 January 2005 11:28

Re: Basic Authentication Window

2005-01-28 Thread Gia Thornton
Hi Larry, Thank you for your reply! Yes, I have tried the form authentication. It does redirect to the login page when session expires. Gia Larry Meadors [EMAIL PROTECTED] wrote: If you are using basic authentication, that is out of your control - the browser will resend

IIS, Tomcat and NTLM Authentication

2005-01-27 Thread Sue Roe
the Intranet or the Internet. An issue has arisen with NTLM authentication. We extract a users domain\username details using NTLM Authentication, the code is listed at the bottom of this e-mail. This mechanism worked 100% on the old configuration. Unfortunately with the IIS server upgrade and change

RE: IIS, Tomcat and NTLM Authentication

2005-01-27 Thread Allistair Crossley
(tomcat-user@jakarta.apache.org) Subject: IIS, Tomcat and NTLM Authentication Hi We have just upgraded our server software, running a Java application, as follows: From: IIS 4, Tomcat 4.1 - both running on same server - NT4 To: IIS 5, Tomcat 4.1 - both running on same

RE: IIS, Tomcat and NTLM Authentication

2005-01-27 Thread Allistair Crossley
Sorry! just noticed you are not moving to TC 5. Perhaps this does not solve your problem afterall. -Original Message- From: Allistair Crossley Sent: 27 January 2005 11:28 To: Tomcat Users List Subject: RE: IIS, Tomcat and NTLM Authentication Hi, Sounds like you need to set

RHEL, mysql 4.1.9 tomcat 5028, form authentication login failure.

2005-01-27 Thread Pawson, David
After chasing for a day, a nasty arose I thought others might like to know of. rhel has /etc/hosts localhost entry as 127.0.0.1 localhost.localdomain localhost If you use form authentication, with server.xml entries such as Realm className=org.apache.catalina.realm.JDBCRealm

Re: RHEL, mysql 4.1.9 tomcat 5028, form authentication login failure.

2005-01-27 Thread David Smith
might like to know of. rhel has /etc/hosts localhost entry as 127.0.0.1 localhost.localdomain localhost If you use form authentication, with server.xml entries such as Realm className=org.apache.catalina.realm.JDBCRealm debug=0 driverName=com.mysql.jdbc.Driver connectionURL

RE: RHEL, mysql 4.1.9 tomcat 5028, form authentication login failure.

2005-01-27 Thread Pawson, David
-Original Message- From: David Smith Or grant privileges on the database to 'x'@'localhost' and 'x'@'localhost.localdomain'. Then give both accounts the same password. It won't matter which one mysql sees because they'll both work. Thanks, easier than

Basic Authentication Window

2005-01-27 Thread Gia Thornton
Hi, I am using Tomcat Container managed security: Basic Authentication by adding the following to web.xml. security-constraint web-resource-collection web-resource-nameThe Entire Web Application/web-resource-name url-pattern/XMLServlet/url-pattern /web-resource

Re: BASIC Authentication

2005-01-25 Thread Giorgio Ponza
error-code401/error-code location/pages/error/noaccess.jsp/location /error-page Ashish Thanks for the answer, but this method doesnt work. Infact if a resourse is under authentication (like manager) and i setup a 401 page error, the system does not ask for user

BASIC Authentication

2005-01-24 Thread Giorgio Ponza
saying type Status report message description This request requires HTTP authentication (). Is possible to change this default page? Tx everybody Giorgio - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail

Re: BASIC Authentication

2005-01-24 Thread Omar Adobati
This request requires HTTP authentication (). Is possible to change this default page? Tx everybody Giorgio - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Adobati

Re: BASIC Authentication

2005-01-24 Thread Giorgio Ponza
Omar Adobati ha scritto: I never try it, but maybe u can write your own code into the login page that redirect you on a different page if the login taske will not completed as needed... I can't try this :D There is no login page, only a box appearing over the browser asking user and password.

Re: BASIC Authentication

2005-01-24 Thread Omar Adobati
Oh, I'm sorry... you are using the basic auth mode... there was a missunderstanding... sorry again... On Mon, 24 Jan 2005 14:29:44 +0100, Giorgio Ponza [EMAIL PROTECTED] wrote: Omar Adobati ha scritto: I never try it, but maybe u can write your own code into the login page that redirect you

Re: BASIC Authentication

2005-01-24 Thread Ashish Kulkarni
Hi May be try putting the following in web.xml file just before taglib ( i am not sure but works with 2.2) error-page error-code403/error-code location/pages/error/noaccess.jsp/location /error-page error-page

bizarre authentication problem

2005-01-24 Thread Andy Kriger
I have an Tomcat server on an internal network configured to require basic authentication. This works fine when I use IE or Java code to access a site, but when I try to access the site using Firefox, the user/password is never accepted. I have packet sniffed the GET calls from both IE and Firefox

Re: problem with Basic authentication -- no window to login

2005-01-21 Thread Ashish Kulkarni
Hi i am using windows XP with service pack 1, and had tried addind ResourceLink.. to my context.xml, but still did not work, i am going to pass this problem and use form based authentication which is working fine Ashish --- Parsons Technical Services [EMAIL PROTECTED] wrote: IE on Linux

basic or form based authentication not working

2005-01-20 Thread Ashish Kulkarni
Hi i am using tomcat5.0.28 and trying to setup basic or form based authentication, and it is just not working, following is the information in web.xml security-constraint web-resource-collection web-resource-namesecure download maps software /web-resource-name url-pattern/pages/download

Re: basic or form based authentication not working

2005-01-20 Thread Omar Adobati
can you show haow you set up the context for this webapp? On Thu, 20 Jan 2005 11:49:02 -0800 (PST), Ashish Kulkarni [EMAIL PROTECTED] wrote: Hi i am using tomcat5.0.28 and trying to setup basic or form based authentication, and it is just not working, following is the information

Re: basic or form based authentication not working

2005-01-20 Thread Ashish Kulkarni
PROTECTED] wrote: Hi i am using tomcat5.0.28 and trying to setup basic or form based authentication, and it is just not working, following is the information in web.xml security-constraint web-resource-collection web-resource-namesecure download maps software /web-resource

problem with Basic authentication -- no window to login

2005-01-20 Thread Ashish Kulkarni
Hi i was able to make my application work with form authentication, then i changed the login-config to make it basic authentication like below, but i am not getting any login window, it just gives me no access 403 error why login-config auth-methodBASIC/auth-method realm-nameBasic

RE: problem with Basic authentication -- no window to login

2005-01-20 Thread Aris Javier
what browser ar you using? -Original Message- From: Ashish Kulkarni [mailto:[EMAIL PROTECTED] Sent: Friday, January 21, 2005 6:24 AM To: tomcat-user@jakarta.apache.org Subject: problem with Basic authentication -- no window to login Hi i was able to make my application work with form

RE: problem with Basic authentication -- no window to login

2005-01-20 Thread Ashish Kulkarni
with Basic authentication -- no window to login Hi i was able to make my application work with form authentication, then i changed the login-config to make it basic authentication like below, but i am not getting any login window, it just gives me no access 403 error why login-config auth

RE: problem with Basic authentication -- no window to login

2005-01-20 Thread Aris Javier
authentication -- no window to login I have tried internet explorer and mozilla Ashish --- Aris Javier [EMAIL PROTECTED] wrote: what browser ar you using? -Original Message- From: Ashish Kulkarni [mailto:[EMAIL PROTECTED] Sent: Friday, January 21, 2005 6:24 AM To: tomcat-user

Re: problem with Basic authentication -- no window to login

2005-01-20 Thread Parsons Technical Services
] To: Tomcat Users List tomcat-user@jakarta.apache.org Sent: Friday, January 21, 2005 12:20 AM Subject: RE: problem with Basic authentication -- no window to login assuming you're using linux.. I encountered this problem in mozilla 1.6... downloaded 1.7 version and login window appeared

[Tomcat 5.0] sharing session and authentication

2005-01-17 Thread Omar Adobati
Good Morning, I would like to know if there is a way to share authentication informations and session informations too betwen a page and another one thet is into a iframe. The authentication is done usiing the tomcat capabilities (form-authentication method) -- Adobati Omar [EMAIL PROTECTED

Re: [Tomcat 5.0] sharing session and authentication

2005-01-17 Thread QM
On Mon, Jan 17, 2005 at 08:45:20PM +0100, Omar Adobati wrote: : I would like to know if there is a way to share authentication : informations and session informations too betwen a page and another : one thet is into a iframe. : The authentication is done usiing the tomcat capabilities : (form

Re: [Tomcat 5.0] sharing session and authentication

2005-01-17 Thread Omar Adobati
the scenario is the last u said. There is a way, maybe playing with context, to do what i need? On Mon, 17 Jan 2005 14:24:09 -0600, QM [EMAIL PROTECTED] wrote: On Mon, Jan 17, 2005 at 08:45:20PM +0100, Omar Adobati wrote: : I would like to know if there is a way to share authentication

Re: [Tomcat 5.0] sharing session and authentication

2005-01-17 Thread QM
On Mon, Jan 17, 2005 at 09:28:49PM +0100, Omar Adobati wrote: : If the two resources are not part of the same webapp, then no, this : isn't possible (read: not possible using standard J2EE session scoping). : There is a way, maybe playing with context, to do what i need? If both sites/webapps

Why am I getting this authentication window

2005-01-14 Thread Venkat Radha Venkataramanan
Hello: I am running Tomcat 5.0. I installed it about 2 months back and I have been learning the ropes these days. This morning when I tried to go into the Manager application and/or the admin application (http://127.0.0.1:8080/admin/), I get an authentication box: I dont know

RE: Why am I getting this authentication window

2005-01-14 Thread Dale, Matt
List'Subject: Why am I getting this authentication window Hello: I am running Tomcat 5.0. I installed it about 2 months back and I have been learning the ropes these days. This morning when I tried to go into the Manager application and/or the admin application (http://127.0.0.1

RE: Why am I getting this authentication window

2005-01-14 Thread Venkat Radha Venkataramanan
_ From: Dale, Matt [mailto:[EMAIL PROTECTED] Sent: Friday, January 14, 2005 12:10 PM To: Tomcat Users List Subject: RE: Why am I getting this authentication window you need to add a user with the manager role to the tomcat-users.xml file. Then use this login and you will be able to access

RE: Authentication problem in Sending email from servlet. (tomcate 5)

2005-01-14 Thread Daxin Zuo
Sorry, no problem. The account password is wrong. -Original Message- From: Daxin Zuo [mailto:[EMAIL PROTECTED] Sent: Thursday, January 13, 2005 3:44 PM To: Tomcat Users List Subject: Authentication problem in Sending email from servlet. (tomcate 5) Hi, In my web page, user sends

Authentication problem in Sending email from servlet. (tomcate 5)

2005-01-13 Thread Daxin Zuo
and password, because the C++ program sends email without authentication. if I set prop.put(mail.smtp.auth, false); Exception: SendEmail Error: javax.mail.AuthenticationFailedException If I set to Password and username to , or set the user name to the From-Email address: SendEmail Error

Authentication - Best practice

2005-01-12 Thread VAN DER MARLIERE FREDERIC
Hi all. For the web-application I'm developping, I need the user to authenticate himself. I read tomcat documentation and found the realms. My question is: are there best pratice on how to use realm? Thanks. Fred. Ce message et toutes les

RE: Authentication - Best practice

2005-01-12 Thread Rajaneesh
Try http://jakarta.apache.org/tomcat/tomcat-4.1-doc/realm-howto.html for Simple Authentication. Is there any reason why you are going to Realm specifically. If the application security is least of concern then it would be ok. Else it would be better to go for other security soln. Regards

RE: Authentication - Best practice

2005-01-12 Thread Quinten Verheyen
What's insecure about using a realm ? Security level is dependant on the realm type (e.g. jdbc/jndi can be used to), no ? -Original Message- From: Rajaneesh [mailto:[EMAIL PROTECTED] Sent: 12 January 2005 12:13 To: 'Tomcat Users List' Subject: RE: Authentication - Best practice

RE: Authentication - Best practice

2005-01-12 Thread Rajaneesh
List Subject: RE: Authentication - Best practice What's insecure about using a realm ? Security level is dependant on the realm type (e.g. jdbc/jndi can be used to), no ? -Original Message- From: Rajaneesh [mailto:[EMAIL PROTECTED] Sent: 12 January 2005 12:13 To: 'Tomcat Users List

RE: Authentication - Best practice

2005-01-12 Thread Rajaneesh
Ok! I found the link... It is here. java.sun.com/developer/Books/certification/scwcd_9.pdf Regards Rajaneesh -Original Message- From: Rajaneesh [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 12, 2005 4:57 PM To: 'Tomcat Users List' Subject: RE: Authentication - Best practice Hi

RE: Authentication - Best practice

2005-01-12 Thread Quinten Verheyen
Ah ok, in that case I'm not worried ;-) The security level aimed for should be dependant on the application/client types of the company, there are a lot of (mostly small) companies who do not want more security then HTTP Basic authentication simply because none of the applications they develop

Re: Authentication - Best practice

2005-01-12 Thread Nikola Milutinovic
Rajaneesh wrote: Hi, It uses Base64 for sending the data. Heard that Base64 data is easily compramised compared to SSL. Please correct me if I am wrong. You are not wrong. HTTP Basic authentication uses base64 encoding of user credentials. base64 is encoding, not encrypting. The only thing

Re: Authentication - Best practice

2005-01-12 Thread PA
On Jan 12, 2005, at 12:03, VAN DER MARLIERE FREDERIC wrote: My question is: are there best pratice on how to use realm? RFC 2617 - HTTP Authentication: Basic and Digest Access Authentication http://www.faqs.org/rfcs/rfc2617.html In a nutshell, neither Basic nor Digest offers much in terms

Re: Authentication - Best practice

2005-01-12 Thread PA
On Jan 12, 2005, at 13:04, Nikola Milutinovic wrote: SSL is encryption using asymetric+symetric encryption. Asymetric is used for the initial handshake/negotiation (usually RSA) and symmetric is for the channel traffic encryption (usually 3DES). You can also use TLS for authentication purpose

form-based authentication with dynamically computed credentials

2005-01-10 Thread Charlton_Rose
I wish to use form-based authentication that accepts users with the following credentials: username = any string (ex.: test) password = length of username (ex: 4) This is a silly security system, I admit. However, a solution to this problem will help me to solve my *real* problem. Obviously

Re: Chirag: Logout from the JDBCRealm Authentication

2005-01-09 Thread Parsons Technical Services
@jakarta.apache.org Sent: Saturday, January 08, 2005 12:57 AM Subject: Chirag: Logout from the JDBCRealm Authentication Software JDK1.5 jakarta-tomcat-5.5.2 Requirement --- I am using JDBCRealm Authentication. I want to provide a logout facility and I could do

Re: Chirag: Logout from the JDBCRealm Authentication

2005-01-09 Thread Chirag
changes have been made in the code. 2. I have not done this myself. Just makes sense that if you reverse what the register method does.. Doug - Original Message - From: Chirag To: Sent: Saturday, January 08, 2005 12:57 AM Subject: Chirag: Logout from the JDBCRealm Authentication

Chirag: Logout from the JDBCRealm Authentication

2005-01-07 Thread Chirag
Software JDK1.5 jakarta-tomcat-5.5.2 Requirement --- I am using JDBCRealm Authentication. I want to provide a logout facility and I could do that with session.invalidate() function but is there any other way by which without destroying the session we can logout

Re: After JDBCRealm Authentication some jsp/servlet to be executed

2005-01-06 Thread QM
On Wed, Jan 05, 2005 at 09:07:19PM -0800, Chirag wrote: : After the user Logins in the Server through JDBCRealm Authentication I want to store the user Details in the session : : I know there is something called request.getUserPrincipal().getName() : But i need to store the whole companydetails

Re: After JDBCRealm Authentication some jsp/servlet to be executed

2005-01-06 Thread Chirag
PROTECTED] wrote:On Wed, Jan 05, 2005 at 09:07:19PM -0800, Chirag wrote: : After the user Logins in the Server through JDBCRealm Authentication I want to store the user Details in the session : : I know there is something called request.getUserPrincipal().getName() : But i need to store the whole

Re: After JDBCRealm Authentication some jsp/servlet to be executed

2005-01-06 Thread Chirag
Trying to implement a javax.servlet.Filter It has a method which is public void doFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain filterChain) throws java.io.IOException, javax.servlet.ServletException But I want to access the

After JDBCRealm Authentication some jsp/servlet to be executed

2005-01-05 Thread Chirag
Software JDK1.5 jakarta-tomcat-5.5.2 Requirement After the user Logins in the Server through JDBCRealm Authentication I want to store the user Details in the session I know there is something called request.getUserPrincipal().getName() But i need to store the whole companydetails in the Session

Re: Tomcat and SSL : Want Client Authentication but not Server Authentication

2004-12-25 Thread Mark Anderson
). Is it possible to achieve or not because as far as i know JSSE and Claymore' PureTLS (SSL implementations) both make Server authentication mandatory !! Thanks in advance !! Onkar

Tomcat and SSL : Want Client Authentication but not Server Authentication

2004-12-24 Thread Onkar Singh
Hi , I want Client ( Web Browser) to be authenticated and not the Server ( Web Server). Is it possible to achieve or not because as far as i know JSSE and Claymore' PureTLS (SSL implementations) both make Server authentication mandatory !! Thanks

FORM based authentication config

2004-12-21 Thread Chris Chappell
Hi I'm having trouble getting form based authentication to work. Any help much appreciated. I'm missing something simple I'm sure. (TC 5.0.19, W2K, Mysql4) I am using a JDBC Realm which works fine with BASIC auth. After changing to FORM and try http://127.0.0.1:8080/MyApp/security/protected

RE: FORM based authentication config

2004-12-21 Thread Goel, Manish Kumar
Hi, see this this might help you http://www.webservertalk.com/message633890.html cheers Manish -Original Message- From: Chris Chappell [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 21, 2004 7:45 PM To: Tomcat Users List Subject: FORM based authentication config Hi I'm having

Re: FORM based authentication config

2004-12-21 Thread Chris Chappell
the error page Chris - Original Message - From: Goel, Manish Kumar [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Tuesday, December 21, 2004 2:26 PM Subject: RE: FORM based authentication config Hi, see this this might help you http://www.webservertalk.com/message633890

Re: FORM based authentication config

2004-12-21 Thread Viorel C.
On Tue, 2004-12-21 at 16:15, Chris Chappell wrote: Hi I'm having trouble getting form based authentication to work. Any help much appreciated. I'm missing something simple I'm sure. (TC 5.0.19, W2K, Mysql4) I am using a JDBC Realm which works fine with BASIC auth. After changing to FORM

MYSQL Authentication

2004-12-20 Thread Michael Hamilton
I have a servlet that I do custom authentication with on the backend, but I want to move this MYSQL authentication into Tomcat. Does Tomcat support user authentication from a database? -M - To unsubscribe, e-mail: [EMAIL

RE: MYSQL Authentication

2004-12-20 Thread Fredrik Liden
: MYSQL Authentication I have a servlet that I do custom authentication with on the backend, but I want to move this MYSQL authentication into Tomcat. Does Tomcat support user authentication from a database? -M - To unsubscribe, e

Re: Authentication isn't working with mod_jk 1.7.3 beta.

2004-12-17 Thread Jim Lynch
it works, if I go to http://xxx/resources/input it fails without ever showing me the basic authentication popup login window. The full error message from the browser is : HTTP Status 401 - *type* Status report *message

Re: Authentication isn't working with mod_jk 1.7.3 beta.

2004-12-17 Thread Jim Lynch
the AccessLogValve on tomcat and see if your request is getting through. Charlie -Original Message- From: Jim Lynch [mailto:[EMAIL PROTECTED] Sent: Thursday, December 16, 2004 8:28 AM To: Tomcat Users List Subject: Re: Authentication isn't working with mod_jk 1.7.3 beta. That's quite

Re: Authentication isn't working with mod_jk 1.7.3 beta.

2004-12-17 Thread Remy Maucherat
On Fri, 17 Dec 2004 10:55:27 -0500, Jim Lynch [EMAIL PROTECTED] wrote: The request is making a single entry into the log. 198.149.32.31 - - [17/Dec/2004:09:46:27 -0600] GET /resources/input HTTP/1.0 401 667 If I go to port 8080 and get validated, then it works without the port 8080. It's

Re: Authentication isn't working with mod_jk 1.7.3 beta.

2004-12-17 Thread Jim Lynch
Is there something special I have to do in mod_jk config file for apache 2 that I didn't have to do for Apache 1.3 to permit basic authentication? Here is the section of the server.xml file dealing with the authentication I'm using: Context className

Re: Authentication isn't working with mod_jk 1.7.3 beta.

2004-12-16 Thread Jim Lynch
, but the authentication doesn't work through the connector. This simply is not true. It works very fine, and the authentication window is showed to the user. Check your config. Mladen. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional

RE: Authentication isn't working with mod_jk 1.7.3 beta.

2004-12-16 Thread Cox, Charlie
: Authentication isn't working with mod_jk 1.7.3 beta. That's quite possible but not helpful. The configuration is identical in essence to a working version on apache 1.3. Can anyone tell me what the differences are between the two are? Jim. Mladen Turk wrote: Jim Lynch wrote: I finally

Re: Authentication isn't working with mod_jk 1.7.3 beta.

2004-12-15 Thread Mladen Turk
Jim Lynch wrote: I finally got mod_jk to comple on RH 9 for Apache 2, but the authentication doesn't work through the connector. This simply is not true. It works very fine, and the authentication window is showed to the user. Check your config. Mladen

Authentication isn't working with mod_jk 1.7.3 beta.

2004-12-15 Thread Jim Lynch
I finally got mod_jk to comple on RH 9 for Apache 2, but the authentication doesn't work through the connector. If I go to port 8080 I get the login popup and am able to enter the app OK, however if I try to go to the default port and connect via mod_jk I get an authentication error. I never

client cert authentication problem

2004-12-10 Thread Brian Rook
certificate code works, because it worked when I was using the tomcat webserver alone. It seems like apache is doing something that keeps the client certificate information from being passed to tomcat. From the Apache list they told me that Apache will be doing the client cert authentication and will pass

Re: Strange Authentication Behavior

2004-11-30 Thread Nikola Milutinovic
Peter Neu wrote: Hello all, does anyone know what I means when I get this error message: The requested resource (/favicon.ico) is not available. when I try to log in via form authentication. This error occurs when I use Firefox. /favicon.ico is a semi-supported feature, introduced by IE5, if I'm

Re: Form Authentication Trouble with Firefox

2004-11-30 Thread Peter Neu
Hi Bob, I looked through the source of AuthenticatorBase but could not find the checkUserData method. It seems the whole thing has changed to some degree in the last few releases. Seems like I can't serve any Firefox clients. Regards, Peter Bob Feretich schrieb: I have not examined Tomcat 5. My

Re: Form Authentication Trouble with Firefox

2004-11-29 Thread Peter Neu
of defining the authentication in the web-xml ? If it helps the relevant part in the web.xml looks like this: security-constraint web-resource-collection web-resource-name Entire Application /web-resource-name url-pattern/*/url-pattern http-methodGET/http-method http-methodPOST/http-method

Re: Form Authentication Trouble with Firefox

2004-11-29 Thread Bob Feretich
I experienced as problem that might be similar to yours. I was testing with Netsacpe 7 (Mozilla based like Foxfire) and IE. My form authentication worked with IE, but not Netscape. It occurred quite a while ago (using Tomcat 4.1.x), so I am not clear on the exact details. My debug showed

Re: Form Authentication Trouble with Firefox

2004-11-29 Thread Peter Neu
was testing with Netsacpe 7 (Mozilla based like Foxfire) and IE. My form authentication worked with IE, but not Netscape. It occurred quite a while ago (using Tomcat 4.1.x), so I am not clear on the exact details. My debug showed that Netscape was not handling the session cookies the same way

Strange Authentication Behavior

2004-11-29 Thread Peter Neu
Hello all, does anyone know what I means when I get this error message: The requested resource (/favicon.ico) is not available. when I try to log in via form authentication. This error occurs when I use Firefox. Regards, Peter

Re: Form Authentication Trouble with Firefox

2004-11-29 Thread Bob Feretich
I have not examined Tomcat 5. My hosting provider doen't support it, yet. For Tomcat 4.1.21 (and may be the same for Tomcat 5): 1) Download the source tree from the jakarta.apache.org site. 2) AuthenticatorBase can be found at catalina/src/share/org/apache/catalina/authenticator/ 3) After you

Form Authentication probem with tomat 4.1.30

2004-11-29 Thread pandu yelamanchili
Hi I am using Form Authentication on Tomcat 4.1.30 and oracle ojdbc14.jar driver. It always fails. When I used debugger in the JDBCRealm class of Tomcat, All my user id / db info is right, but when the username is set on the preparedstatement, it does not work. I always get an empty resultset

Form Authentication Trouble with Firefox

2004-11-28 Thread Peter Neu
Hello everybody, I'm using form authentication to log on the users to my website. Until now I was using Mozilla Firefox for developement but now I came across this problem that Firefox doesn't allow a clean log in and always redirects to the error.jsp. The authentication is correct because

User Authentication For Download Page

2004-11-28 Thread Damjan Majstorovic
Hi all, I offer download of a file on my site. It sends content using ServletOuputStream. This is the command that I exectly want to constraint with Tomcat's security mechanism (I use JDBC Realm). After user clicks on download, s/he gets forwarded to login. After login the File Download popup

Re: Form Authentication Trouble with Firefox

2004-11-28 Thread Nikola Milutinovic
Peter Neu wrote: Hello everybody, I'm using form authentication to log on the users to my website. Until now I was using Mozilla Firefox for developement but now I came across this problem that Firefox doesn't allow a clean log in and always redirects to the error.jsp. The authentication

Re: Mysterious (I think caching) Problem with IE 6 and Form Authentication under SSL (Tomcat 5.0.x)

2004-11-23 Thread Angel Cervera Claudio
I have same problem and i don't find any answer to resolved. :( SOS!! :( Did you resolved this problem? How? El mar, 19-10-2004 a las 12:15 +0200, Martin Grüneberg escribió: Hello, I have a real strange Problem with Tomcat and IE When I get forwarded to the login page of my application and

SSL mutual authentication problem with Tomcat5

2004-11-18 Thread Ryan LeCompte
to not require client-side authentication (for example in tomcat the configuration attribute 'clientAuth=false' would be used). However, when I turn on this attribute and require client-side authentication, the client fails to communicate successfully with the Tomcat5 server. The following exception

RE: SSL mutual authentication problem with Tomcat5

2004-11-18 Thread Hubble, Christopher
] Subject: SSL mutual authentication problem with Tomcat5 Hello, I'm trying to have a standalone Java client communicate via SSL with a remote Tomcat5 server. I'm setting the two system properties for specifying the SSL trust store path and trust store password. The client is able to successfully

RE: Tomcat 5.5.4 and Deferred IIS NTLM Authentication

2004-11-12 Thread Allistair Crossley
=false in the jk2.properties file instead and link it, so. All the best, Allistair. -Original Message- From: news [mailto:[EMAIL PROTECTED] Behalf Of Bill Barker Sent: 12 November 2004 04:42 To: [EMAIL PROTECTED] Subject: Re: Tomcat 5.5.4 and Deferred IIS NTLM Authentication Tomcat

Tomcat 5.5.4 and Deferred IIS NTLM Authentication

2004-11-11 Thread Allistair Crossley
Hi, OK, apart from my logging problem, the only other main issue appears to be that Tomcat is no longer receiving a populated request.getRemoteUser value. In Tomcat 5.0 series, we had to add the following line to jk2.properties request.tomcatAuthentication=false In order to instruct Tomcat to

Basic authentication

2004-11-11 Thread Michal Kwiatek
I would like to use container-based declarative authentication without the need to modify any files in $CATALINA_HOME/conf directory. To simplify my question a bit: is it somehow possible to make tomcat read tomcat-users.xml from the war file, and not from $CATALINA_HOME/conf? Michal

Re: Basic authentication

2004-11-11 Thread Andoni
in Server.xml. You need not use a flat file format though to serve your username/password combinations just because you are using Basic Authentication. The two are separate issues: issue one is: What type of authentication do I want? Form, Basic, Digest, Client-Cert. This is a Sun servlet

Re: Tomcat 5.5.4 and Deferred IIS NTLM Authentication

2004-11-11 Thread Bill Barker
Tomcat 5.5.x doesn't use jk2.properties by default. To use it, you need: Connector protocol=AJP/1.3 propertiesFile=conf/jk2.properties ... / Alternatively you can configure it directly: Connector protocol=AJP/1.3 request.tomcatAuthentication=false ... / Allistair Crossley [EMAIL

Manager App and basic authentication

2004-11-09 Thread Mufaddal Khumri
Hi, (Sorry, I posted this message under the wrong thread before) I am using Apache - modjk -Tomcat 5 configuration. The tomcat manager app uses BASIC authentication. When I point my browser to /myurl/manager the browser pops up a dialog box for the username and password. Upon entering

Re: Manager App and basic authentication

2004-11-09 Thread Peter Lin
. The tomcat manager app uses BASIC authentication. When I point my browser to /myurl/manager the browser pops up a dialog box for the username and password. Upon entering the correct information it logs me into the manager app. I am trying to now use JMeter to log in to the manager app: URL

RE: User Authentication Problem LDAP

2004-11-08 Thread Shapira, Yoav
Authentication Problem LDAP Hi All, I got my problem solved..The culprit was that I hadn't included the attribute digest with value SHA (SHA because my LDAP directory is storing the password in this format) in the realm directive in server.xml. Also, I had to change role-namecn/role-name to role-name

Re: User Authentication Problem LDAP

2004-11-07 Thread Sandeep N
Hi All, I got my problem solved..The culprit was that I hadn't included the attribute digest with value SHA (SHA because my LDAP directory is storing the password in this format) in the realm directive in server.xml. Also, I had to change role-namecn/role-name to role-name*/role-name in web.xml.

authentication in virtual host redirecting to wrong index.jsp

2004-11-05 Thread Paul Summers
that the application on my subdomain uses form authentication and after a successful login, the redirect goes to the default Tomcat index.jsp file rather than the default index.jsp file for the application as its supposed to. The index.jsp page for the app is in the root dir of the app folder

Re: User Authentication Problem LDAP

2004-11-02 Thread Olivier Jolly
I'm not a specialist in this but it smells like you're saying that the role name are listedin the attribute 'cn' and that to access your site the connected user should have the role 'cn' hence if you do not have a user with it's cn=cn (attribute cn = value cn), it won't work. Maybe you could

User Authentication Problem LDAP

2004-11-01 Thread Sandeep N
Hi, I have a problem trying to authenticate users, whose details are stored in the LDAP directory through Apache Tomcat. The details of the software I am using are as follows : LDAP: OpenLDAP V 2.2.17 Web-Server: Apache-Tomcat V 4.1.30 OS: Suse - Linux The LDAP directory structure is somewhat

JDBCRealm manual authentication

2004-10-26 Thread Ben
Hi How do I manually authenticate a user given a String username and String password? My applicaton needs to use this feature in a Struts ActionForm, is it possible with JDBCRealm? I am using Tomcat 5 BTW. Thanks, Ben - To

BASIC authentication without Popup Verification window

2004-10-23 Thread e-Denton Subscriber
Hi! I can't figure out why my BASIC authorization isn't working for my app. The pages show up as 401 Not Authorized, but no popup authorization window pops up! Further, the admin and manager apps are working using my JDBCRealm (:Enter Password window does pop up). Help appreciated. server.xml:

Re: BASIC authentication without Popup Verification window

2004-10-23 Thread e-Denton Subscriber
Nevermind. I had a 401 page defined in web.xml, so it was being sent there instead of the browser. My mistake. - Original Message - From: e-Denton Subscriber [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Saturday, October 23, 2004 4:06 PM Subject: BASIC authentication

<    1   2   3   4   5   6   7   8   9   10   >