digest authentication or DIGEST

2002-11-04 Thread Frank Balluffi
servlet successfully runs. When I attempt to configure Tomcat to use digest authentication (and restart Tomcat), weird things happen. conf/server.xml contains: conf/tomcat-users.xml contains: I used the following command to MD5 digest the password "password" [without th

RE: digest authentication or DIGEST

2002-11-05 Thread Koes, Derrick
Leave the in the web.xml as BASIC. -Original Message- From: Frank Balluffi [mailto:frank.balluffi@;db.com] Sent: Monday, November 04, 2002 6:01 PM To: [EMAIL PROTECTED] Subject: digest authentication or DIGEST I am able to successfully configure Tomcat 4.1.12 to use basic

RE: digest authentication or DIGEST

2002-11-05 Thread Frank Balluffi
cc: Subject: RE: digest authentication or DIGEST 11/05/2002 01:29 PM Plea

RE: digest authentication or DIGEST

2002-11-05 Thread Jacob Kjome
"Koes, Derrick" nephew.com> cc: Subject: RE: digest authentication or DIGEST 11/05/2002 01:29 PM Please respond to

RE: digest authentication or DIGEST

2002-11-05 Thread Frank Balluffi
e was that web.xml's auth-method needed to be set to BASIC, not DIGEST. That said, I do not see much advantage in using digest authentication over

RE: digest authentication or DIGEST

2002-11-05 Thread Koes, Derrick
I think what is really happening is that the realm is handling the digesting to do the password "match". Setting auth-method to DIGEST probably tries to handle encryption up front, not delaying it until (plain text until then) the realm code. What encryption algorithm is used if

digest

2003-03-07 Thread Stan Henderson
I am trying the setup my web app to use the DIGEST authentication. I have found references to using the following in the web.xml file: . . DIGEST I have also seen a reference to modifying the server.xml file and specifing digest="MD5" for the . I just w

Digest

2003-08-14 Thread Maxime Colas des Francs
Hi In a jsp application i want to calculate digested passowrds dynamically According to the Realm How To ... i write this code in a jsp : <% String digest = org.apache.catalina.realm.RealmBase.Digest(request.getParameter("password"), "MD5");

RE-POST RE: digest authentication or DIGEST

2002-11-07 Thread Koes, Derrick
-Original Message- From: Koes, Derrick Sent: Tuesday, November 05, 2002 6:43 PM To: 'Tomcat Users List' Subject: RE: digest authentication or DIGEST I think what is really happening is that the realm is handling the digesting to do the password "match". Setting a

Digest authentication

2001-05-14 Thread Oki DZ
Hi, I'd like to use the Digest authentication on Tomcat. I set my app's web.xml as follows: http://java.sun.com/j2ee/dtds/web-app_2_3.dtd";> sample SampleServlet properties WEB-INF/sample.properties sam

DIGEST authentication!

2003-03-25 Thread Uwe Klosa
Hi, I'm using Tomcat 4.1.18, Apache 1.3.27 and mod_jk as the connector. I want to implement DIGEST authentication on tomcat. I implemented already the BASIC authentication which is working fine. But if I want to change to DIGEST it doesn't work anymore. This is the contents of

DIGEST authentication

2003-07-11 Thread Dave Naden
I can use Basic auth, and FORM-based auth,using the UserDatabaseRealm, with no problem. But when I try to use DIGEST, like this: DIGEST UserDatabase ...etc Tomcat obviously recognizes the keyword, because I get prompted by a different type of screen from IE. But I can&#x

Re: Digest

2003-08-07 Thread Tim Funk
nse ! But I have now another pb . javadoc for org.apache.catalina.realm.RealmBase.Digest() says : ... Digest password using the algorithm especificied and convert the result to a corresponding hex string ... So how to convert my base64(MD5()) digest to the correct hex String ? I try Integer.toHe

Re: Digest

2003-08-10 Thread Bill Barker
quot;MD5"); String preDigest = request.getParameter("user")+ ":"+RealmName+request.getParameter("password"); byte [] pwd = md.digest(preDigest.getBytes()); String digest = toBase64(pwd); %> Here, toBase64 is your favorite byte->base64 encoding library.

Re: Digest

2003-08-10 Thread Tim Funk
probably want something like: <% MessageDigest md = MessageDigest.getInstance("MD5"); String preDigest = request.getParameter("user")+ ":"+RealmName+request.getParameter("password"); byte [] pwd = md.digest(preDigest.getBytes()); String digest = toBase

Re: Digest

2003-08-10 Thread Maxime Colas des Francs
Thks for your response ! But I have now another pb . javadoc for org.apache.catalina.realm.RealmBase.Digest() says : ... Digest password using the algorithm especificied and convert the result to a corresponding hex string ... So how to convert my base64(MD5()) digest to the correct hex

Re: Digest

2003-08-14 Thread 唐文民
Maxime Colas des Francs,您好! You can copy catalina.jar to \shared\lib.It's OK. === 2003-08-06 16:20:00 您在来信中写道:=== >Hi > >In a jsp application i want to calculate digested passowrds dynamically >According to the Realm How To ... i write this code in a jsp : &

Re: Digest

2003-08-14 Thread Nikola Milutinovic
> In a jsp application i want to calculate digested passowrds dynamically > According to the Realm How To ... i write this code in a jsp : > > <% String digest = > org.apache.catalina.realm.RealmBase.Digest(request.getParameter("password"), > "MD5");

RES: RE-POST RE: digest authentication or DIGEST

2002-11-08 Thread Iran Marcius
Let me see if I understood. What you are saying to me is the browser is sending na encrypted password to the servlet engine, which is trying to encrypt the password received again because of my 'digest="SHA"'? I remove digest parameter in realm configuration before and didn&

DIGEST authentication problem

2002-05-29 Thread Kallos Andrei
Hello, We have an authentication problem using Tomcat. Briefly, we have set up a simple webapp with DIGEST authentication. It works fine with IE5, but it fails on Mozilla. We have also tested Mozilla on an Apache Http server with DIGEST authentication, and it works! So, we assume that there is

Digest authentication problem

2002-02-18 Thread Meurant , Gerald
Hi, I have a tomcat server using a JNDI-Realm to authenticate against a LDAP server. It works fine when using the BASIC authentication mode, but it doesn´t work when specifying the DIGEST authentication mode. There´s no error message in tomcat, neither in the LDAP server, so I used a sniffer to

digest/form authentication

2003-07-24 Thread Hirsch, Barbara
Is anyone using digest authentication? Or form authentication? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

RealmBase Digest Method

2003-10-23 Thread Robert D. Abernethy IV
I have used this method from the command-line to create encrypted passwords for use in a JDBCRealm protected web application. I would like add the ability to create new users on the fly using this same web application while continuing to use the Digest method to create these encrypted passwords

digest password setup

2003-12-09 Thread Ostad, James
Hi, I have installed Tomcat as usual. Now I want to use digest password with tomcat database by adding digest="MD5" to the realm. But, when I do that, how do I get back in? the original password in the tomcat-user.xml file is normal text. and during the login after the digest is se

Authentication method 'DIGEST'

2004-07-12 Thread johan . philippe
Does anyone know if the DIGEST authentication is supported by Tomcat 5? I have been trying to get it working with a Tomcat 5.0.24 on Windows and the default UserDatabase, but have not been completely successful. The authentication of a user seems to work OK (with the browser dialog being and

DIGEST Authentication question

2004-09-17 Thread Alexander Fishchuk
Hi guys. I'm having trouble setting up DIGEST authentication for single webapp in Tomcat 5.0.27. does anyone have done it successfully I'd appreciate some guidance in this area Alex

DataSourceRealm + DIGEST authentication

2004-10-15 Thread Shinobu Kawai
Hi all, Has anyone created a DataSourceRealm that works with DIGEST authentication? I'm planning to make one, but only if I'm not reinventing the wheel. A relative bugzilla issue: http://issues.apache.org/bugzilla/show_bug.cgi?id=19767 Best regards, -- Shinobu Kawai -- Shi

Re: DIGEST authentication problem

2002-05-29 Thread Larry Meadors
4.0.3 and Mozilla 0.9.9: This does not work: Client: MZ-0.9.9/RH-7.2 Server: TC-4.0.3/RH-7.2 Auth: DIGEST This works: Client: IE-6/W-2K Server: TC-4.0.3/Either Auth: Either This works: Client: MZ-0.9.9/RH-7.2 Server: TC-4.0.3/RH-7.2 Auth: BASIC This works

digest authentication using servlets

2001-06-20 Thread Vladimir Grishchenko
Hi all, I need to implement digest authentication using servlets. Just wondering if anyone came across something that can be reused. Is there any support for it in Tomcat? how do i use it if so? I'm also not sure if JDK itself provides any support for it. I see there'

RE: Digest authentication problem

2002-02-18 Thread Meurant , Gerald
I forgot to mention that it´s a tomcat 4.01 . -Mensaje original- De: Meurant , Gerald [mailto:[EMAIL PROTECTED]] Enviado el: lunes, 18 de febrero de 2002 13:23 Para: [EMAIL PROTECTED] Asunto: Digest authentication problem Hi, I have a tomcat server using a JNDI-Realm to authenticate

RE: digest/form authentication

2003-07-24 Thread Sudhir Movva
If everyone using those, responds we would have a plethora of mails :). Please post your question. -Original Message- From: Hirsch, Barbara [mailto:[EMAIL PROTECTED] Sent: Thursday, July 24, 2003 3:25 PM To: 'Tomcat Users List' Subject: digest/form authentication Is anyone us

RE: digest/form authentication

2003-07-24 Thread Hirsch, Barbara
Sorry, my question then is how do i configure my tomcat to do either form based or digest authentication? I can't seem to find it in the documentation at Jakarta. I'm also running Tomcat with JBoss and not sure that that matters. Does it? -Original Message- From: Su

Re: RealmBase Digest Method

2003-10-23 Thread Thai Nguyen
I have used this method from the command-line to create encrypted > passwords for use in a JDBCRealm protected web application. I would > like add the ability to create new users on the fly using this same web > application while continuing to use the Digest method to create these > enc

Re: RealmBase Digest Method

2003-10-23 Thread Christopher Schultz
private static final char[] hex = "0123456789abcdef".toCharArray(); /** * Returns a message digest of the specified string using the * specified digest algorithm. * * @param cleartext The cleartext string to be digested. * @param algorithm The digest algori

RE: RealmBase Digest Method

2003-10-24 Thread Robert D. Abernethy IV
Thanks Chris - that did the trick! Rob Abernethy Dynamic Edge, Inc. -Original Message- From: Christopher Schultz [mailto:[EMAIL PROTECTED] Sent: Thursday, October 23, 2003 5:35 PM To: Tomcat Users List Subject: Re: RealmBase Digest Method Rob/Thai, > All you need to do is drop

RE: digest password setup

2003-12-09 Thread Vinh Tran
, December 09, 2003 11:50 AM To: Tom (E-mail) Subject: digest password setup Hi, I have installed Tomcat as usual. Now I want to use digest password with tomcat database by adding digest="MD5" to the realm. But, when I do that, how do I get back in? the original password in the tomca

RE: digest password setup

2003-12-09 Thread Ostad, James
- From: Vinh Tran [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 09, 2003 12:24 PM To: Tomcat Users List Subject: RE: digest password setup Simply change the password using MD5 and put it in the proper database field. The link below explains how to do this. http://jakarta.apache.org/tomcat

RE: digest password setup

2003-12-09 Thread Vinh Tran
: Ostad, James [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 09, 2003 12:39 PM To: Tomcat Users List Subject: RE: digest password setup Hi, I am putting the following command from the URL you send me to: java org.apache.catalina.realm.RealmBase \ -a {algorithm} {cleartext-password} But I

RE: digest password setup

2003-12-09 Thread Ostad, James
, December 09, 2003 1:23 PM To: Tomcat Users List Subject: RE: digest password setup You need to set your classpath properly. Read the last line from the URL I sent you... [excerpt] To use either of the above techniques, the $CATALINA_HOME/server/lib/catalina.jar file will need to be on your class

RE: digest password setup

2003-12-09 Thread Ostad, James
got them. Thanks for help. I had to drop the \ in the formula. James -Original Message- From: Ostad, James Sent: Tuesday, December 09, 2003 1:46 PM To: Tomcat Users List Subject: RE: digest password setup Hi again, It is asking for credential: usage: realmbase -a what am I

RE: digest password setup

2003-12-09 Thread Ostad, James
I am trying to use digest password with form based login, using tomcat database. I converted admin password to md5 format, and put it into tomcat-users.xml. I am able to login as admin. But when I create a new user, the password is being saved as a text. isn't it supposed to be encrypted

RE: digest password setup

2003-12-09 Thread Ostad, James
I got my own answer. I have to either enter the digested password in the tomcat-users.xml, or via the admin tool. appreciate your help. James -Original Message- From: Ostad, James Sent: Tuesday, December 09, 2003 2:13 PM To: Tomcat Users List Subject: RE: digest password setup I am

manager webapp % digest auth

2004-02-12 Thread Peter Lin
has anyone here tried setting /manager webapp to use "DIGEST" instead of "BASIC"? I just tried it this morning and it didn't work for me. peter - Do you Yahoo!? Protect your identity with Yahoo! Mail AddressGuard

realms - password digest schemas

2004-03-24 Thread Bartosz Lewandowski
Hi All, I have to migrate with user accounts from ldap server to db server. Until now I was using JNDIRealm, now I have to move DataSourceRealm. In the ldap directory user passwords are stored in {foo}passwd schema, where foo could be crypt, md5 or sha. Existing realms assume "hardcoded&qu

Re: Authentication method 'DIGEST'

2004-07-12 Thread Tom Burke
What kind of Windows environment are you in? I think you've got to be a NT or Active Directory domain. Tom Burke - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, July 12, 2004 2:28 PM Subject: Authentication method 'DIGEST'

Re: Authentication method 'DIGEST'

2004-07-12 Thread Bill Barker
UserDatabase doesn't support DIGEST. In fact, it could be that only MemoryRealm (which supports everything) does. However, I can't be bothered to look :). <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > > Does anyone know if the DIGEST authentication is supp

RE: Authentication method 'DIGEST'

2004-07-12 Thread johan . philippe
ED]> To: <[EMAIL PROTECTED]> Sent: Monday, July 12, 2004 2:28 PM Subject: Authentication method 'DIGEST' > > Does anyone know if the DIGEST authentication is supported by Tomcat 5? > I have been trying to get it working with a Tomcat 5.0.24 on Windows and the default

RE: Authentication method 'DIGEST'

2004-07-12 Thread johan . philippe
<[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, July 12, 2004 2:28 PM Subject: Authentication method 'DIGEST' > > Does anyone know if the DIGEST authentication is supported by Tomcat 5? > I have been trying to get it working with a Tomcat 5.0.24 on W

Re: DataSourceRealm + DIGEST authentication

2004-10-17 Thread Shinobu Kawai
Hi all, > Has anyone created a DataSourceRealm that works with DIGEST > authentication? I'm planning to make one, but only if I'm not > reinventing the wheel. If anyone's interested, here's what I have so far: http://sylow.no-ip.com/pub/apache/jakarta/tomcat/D

Using DES algorithm as Digest

2002-10-23 Thread trochph
realm and specifying the digest as "DES". The problem is that I keep getting a Algorithm not found exception. I know the algorithm is in the algorithm jar file because I tested it outside of tomcat. Is it not possible to use outside providers in tomcatwith the default REALMS? Than

Using Digest method of JDBCRealm

2001-05-09 Thread Larry Rogers
Hi All, I'm trying to use the static Digest method included in JDBCRealm in Tomcat 4b3 from the command line. When I execute the following $ java -classpath catalina.jar org.apache.catalina.realm.JDBCRealm -a MD5 pass from tomcat/server/lib, I get the output at the end of this messag

Digest authentication with Memory Realm

2002-05-14 Thread Shimon Crown
Using the default memory realm I have modified the Tomcat server.xml to store the passwords encrypted as follows : This works fine. For my tests I would also like to use digest authorization to transfer the password over the wire. To do this I put the following in my web.xml file

digest , form and basic authentification

2001-07-25 Thread zze-messager FTM balr002
Is anyone can give me an exemple of a a digest authentification? a form ? a basic ? Is is possible to decalre two groups of users with differents authorizations ? Delphine

JDBC Realm and Digest Authentication

2002-01-03 Thread Dennis SELLINGER
Hi, I am using Tomcat 4.0.1 with apache 1.3.22 (with the webapp warp connector) and DB2 on windows NT4 (SP6). I would like to use DIGEST authentication but it does not seem to be working. Further, after reading the Tomcat documentation I am not sure whether it is supposed to work in this

Re: RE: Digest authentication problem

2002-02-18 Thread jay n gaba
hi i am facing the same problem. there is a problem while using the digest authentication mode. it seems the password format return by ldap,in my case netscape directory structure, is different than one used by the digest class of tomcat.netscape uses base64 encoding while tomcat uses some

RE: RE: Digest authentication problem

2002-02-18 Thread Meurant , Gerald
Thanks, I´ll go the same way (now I don´t know really how the bind authentication can be done) ;) -Mensaje original- De: jay n gaba [mailto:[EMAIL PROTECTED]] Enviado el: lunes, 18 de febrero de 2002 15:51 Para: Tomcat Users List Asunto: Re: RE: Digest authentication problem hi i am

Re: RE: Digest authentication problem

2002-02-18 Thread Attila Szegedi
Netscape 4.x versions don't implement DIGEST authentication. When faced with a DIGEST auth, Netscape 4.x will ask the user for a username and password, and send the server a BASIC auth. This is why you're seeing base64 encoded header in a Netscape request - it's BASIC auth,

JDBC Realm Digest Password Generation

2002-02-19 Thread Michael Burgess
Hi All, Configuration tomcat 3.3a win2k I am trying to implement a change password page for our web application, we are using a JDBCRealm with digest="MD5" set on the Realm. The problem is how do I encrypt the password so that it is the same as one generated using the following as

JDBCRealm digest="MD5" returns NullPointerException

2002-02-22 Thread Knight, Digby
Hi everyone, I've had the JDBCRealm working with some Access tables (using ODBC-JDBC bridge) for some time, but today tried adding digest="MD5" or digest="SHA" to the Realm element in server.xml, but I get a NullPointerException whenever I submit the login form now. I

Autentication with digest password(Urgent!)

2002-03-07 Thread Galbayar
I setup Tomcat 4.0.3 on Win2000 with JDBCRealm and a mysql-database. Using plain passwords, everything works fine. But I would like digest my password in the database. how to make this? can u give me step by step tutorial? Thank in advance

Tomcat 3.2.1 JDBCRealm and Digest

2001-01-26 Thread raimee
Hello all, I am running Tomcat 3.2.1 on an NT box. I am using Tomcat's JDBCRealm security features with BASIC authentication. There doesn't appear to be support for DIGEST auth. Is there still development on 3.2.x that would include support for DIGEST auth? If so, when would that b

Bug with digest attribute/UserDatabaseRealm?

2003-01-02 Thread Sam Ewing
I set the digest attribute to "sha" in UserDatabaseRealm, and tried adding a new user using the admin application. It did add a user, but the password was saved in cleartext in tomcat-users.xml and not in its digested form. Is this a bug or am I doing something wrong? Any help apprec

Realm digest setting for mySql?

2003-02-13 Thread Barley
I am setting up a JDBC realm using mySql. I would like to be able to validate against passwords that are stored using the mySql Password() function. Can anyone tell me what the "digest" attribute in Realm should be set to? Many than

help: can't unsubscibe from digest

2003-09-16 Thread scott
To unsubscribe from the digest, e-mail: [EMAIL PROTECTED] doesn't work - anyone know why? thanks, Scott -- - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Does tomcat5 support digest authentication?

2004-07-22 Thread jiesheng zhang
I think it supports digest authentication. However I can not make it works even in the simplest case. I have a basic tomcat 5 installation with one of my web application. I'd like to use digest authentication(I do not send password to server in clear text). The configuration is like

replying to msgs in digest

2005-05-27 Thread Paul Singleton
If I subscribe only to tomcat-user Digest, how can I send a follow-up to a particular msg? Paul Singleton -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.322 / Virus Database: 266.11.17 - Release Date: 25/May/2005

DIGEST authentication; Does it work??

2005-03-21 Thread Mark Leone
I'm trying to use DIGEST authentication with Tomcat, and it doesn't seem to work. I found some articles with Google about IE implementing DIGEST authentication in a way that only worked with MS servers, and I assume that hasn't been corrected. But I'm also using Firefox wi

HTTP Digest authentication and Tomcat 4.0.2

2002-07-10 Thread sebastien . petrucci
Hi Folks, I'm trying to setup a web app protected with an http digest authentication. Everything looks fine, except that Tomcat behaves like my username/password were always wrong. I tested it against the following clients (supporting digest auth of course) : - Opera 6.0 - Internet Exp

RE: Using Digest method of JDBCRealm

2001-05-09 Thread Ignacio J. Ortega
the jar as LocalString_en.properties.. use the jar command for that task.. Saludos , Ignacio J. Ortega > -Mensaje original- > De: Larry Rogers [mailto:[EMAIL PROTECTED]] > Enviado el: miércoles 9 de mayo de 2001 19:45 > Para: [EMAIL PROTECTED] > Asunto: Using Digest meth

Re: Using Digest method of JDBCRealm

2001-05-10 Thread Larry Rogers
De: Larry Rogers [mailto:[EMAIL PROTECTED]] >> Enviado el: miércoles 9 de mayo de 2001 19:45 >> Para: [EMAIL PROTECTED] >> Asunto: Using Digest method of JDBCRealm >> >> >> Hi All, >> >> I'm trying to use the static Digest method included in JDBCReal

Re: Using Digest method of JDBCRealm

2001-05-15 Thread Oki DZ
Larry Rogers wrote: > > Hi All, > > I'm trying to use the static Digest method included in JDBCRealm in > Tomcat 4b3 from the command line. When I execute the following I use Tomcat 4b4. > $ java -classpath catalina.jar org.apache.catalina.realm.JDBCRealm -a >

Re: Using Digest method of JDBCRealm

2001-05-15 Thread Bip Thelin
On Tue, 15 May 2001, Oki DZ wrote: > [...] > > > I'm trying to use the static Digest method included in JDBCRealm in > > Tomcat 4b3 from the command line. When I execute the following > > I use Tomcat 4b4. > > > $ java -classpath catalina.jar org.apac

REPOST - Digest Authentication with Memory Realm

2002-05-14 Thread Shimon Crown
As nobody answered this question the first time around lets have another go ! Using the default memory realm I have modified the Tomcat server.xml to store the passwords encrypted as follows : This works fine. For my tests I would also like to use digest authorization to transfer the

using digest autenticator in tomcat 4

2001-07-17 Thread Marco Magistrali
hi all, I want to use the digest autenthicator with tomcat 4 but I can't I put in server.xml digest="MD5" I put in my web.xml BASIC I try to crypt my password with this method: public static void main(String args[]) { String

Re: digest , form and basic authentification

2001-07-25 Thread Craig R. McClanahan
On Wed, 25 Jul 2001, zze-messager FTM balr002 wrote: > Is anyone can give me an exemple of a a digest authentification? a > form ? a basic ? Is is possible to decalre two groups of users with > differents authorizations ? > The standard Tomcat "/examples" webapp

Re: Re: RE: Digest authentication problem

2002-02-18 Thread jay n gaba
hi attila thank you. can u give some pointers on bind authentication method. thanks. regards jay On Mon, 18 Feb 2002 Attila Szegedi wrote : > Netscape 4.x versions don't implement DIGEST > authentication. When faced with a DIGEST auth, Netscape > 4.x will ask the user for

RE: JDBC Realm Digest Password Generation

2002-02-19 Thread Ignacio J. Ortega
gt; /WEB-INF/lib directory of the application. > > This can't be right... can it? > Well, if your webapp needs something in these jars, why not ? :-) i can be wrong, but i dont see ( given the classloaders separation scheme that 3.3 plays ) nothing harmful in putting this jars in your own

REPOST: JDBCRealm digest="MD5" returns NullPointerException

2002-02-27 Thread Knight, Digby
Hi everyone, I've had the JDBCRealm working with some Access tables (using ODBC-JDBC bridge) for some time, but today tried adding digest="MD5" or digest="SHA" to the Realm element in server.xml, but I get a NullPointerException whenever I submit the login form now. It&

Re: Autentication with digest password(Urgent!)

2002-03-07 Thread Joaquín Sánchez Jiménez
- Original Message - From: "Galbayar" <[EMAIL PROTECTED]> To: "Tomcat Users List" <[EMAIL PROTECTED]> Sent: Thursday, March 07, 2002 10:42 AM Subject: Autentication with digest password(Urgent!) I setup Tomcat 4.0.3 on Win2000 with JDBCRealm and a mysql-database.

Re: Autentication with digest password(Urgent!)

2002-03-07 Thread Christian Froehler
Win2000 with JDBCRealm and a mysql-database. Using plain >passwords, everything works fine. But I would like digest my password in the >database. how to make this? can u give me step by step tutorial? > >Thank in advance > > -- To unsubscribe: <mailto:[EMAIL PROTEC

Re: Tomcat 3.2.1 JDBCRealm and Digest

2001-01-26 Thread Craig R. McClanahan
[EMAIL PROTECTED] wrote: > Hello all, > > I am running Tomcat 3.2.1 on an NT box. I am using Tomcat's JDBCRealm > security features with BASIC authentication. > There doesn't appear to be support for DIGEST auth. Is there still > development on 3.2.x that would inclu

Bug with digest attribute/UserDatabase Realm?

2003-01-03 Thread Sam Ewing
I set the digest attribute to "sha" in UserDatabaseRealm, and tried adding a new user using the admin application. It did add a user, but the password was saved in cleartext in tomcat-users.xml and not in its digested form. Is this a bug or am I doing something wrong? Any help apprec

Tomcat 4.1.18: Digest authentication not working?

2003-01-05 Thread KUMAR,PANKAJ (HP-Cupertino,ex1)
Hi, I am a relative newbiw to Tomcat. The manager application works with BASIC authentication (default configuration), after making appropriate user and role entries in conf/tomcat-users.xml file. However, when I change BASIC to DIGEST as shown below: Default web.xml for "ma

Re: Does tomcat5 support digest authentication?

2004-07-23 Thread johan . philippe
There is only very minimal support for DIGEST authentication. So minimal that in practice I can't see how it could be of any use at this point in time. It is on the list to be improved, but no idea for when: http://jakarta.apache.org/tomcat/tomcat-5.0-doc/status.html Original Me

Does DIGEST work in Tomcat 4.1.24?

2004-10-27 Thread Anderson, M. Paul
Looking at RealmBase, it doesn't seem as if DIGEST authentication can ever work: public Principal authenticate(String username, String clientDigest, String nOnce, String nc, String cnonce, String qop, String realm, String md5a2) { String

Re: DIGEST authentication; Does it work??

2005-03-22 Thread Mark Thomas
Yes it does. I tested this extensively with both IE and Firefox. Any combination of the following is OK: Auth: BASIC, FORM, DIGEST Realm: Memory, UserDatabase, JDBC, DataSource Passwords: Cleartext, digested There is a complication when using digested passwords with the

Re: DIGEST authentication; Does it work??

2005-03-22 Thread Mark Leone
Okay, I was using 5.5.7. So I just downloaded the source and built 5.5.8, and things got worse. Digest authentication is not working for me. I believe I've set everything up correctly. Using an HTTP monitor I see a 401 response coming back from Tomcat with a www-authenticate header

Re: DIGEST authentication; Does it work??

2005-03-22 Thread Mark Leone
I found a silly classpath error that fixed the problem using RealmBase. I didn't realize that my system still had environment variable %catalina_home% pointing to an old tomcat 4.1.24 directory. So when I opened a command window to generate digest values I was executing RealmBase in t

Re: DIGEST authentication; Does it work??

2005-03-23 Thread Mark Leone
So at 3:00 AM I decided to read the Basic and Digest Access Authentication spec (RFC 2617), and it says that MD5 is the default hash algorithm. I had previously seen that Tomcat wasn't sending any response headers explicitly specifying the hash algorithm, even though I had specified SHA i

RE: DIGEST authentication; Does it work??

2005-03-23 Thread David Owens
The docs say this: When a standard realm authenticates by retrieving the stored password and comparing it with the value presented by the user, you can select digested passwords by specifying the *digest* attribute on your element. The value for this attribute must be one of the digest algorithms

Re: DIGEST authentication; Does it work??

2005-03-23 Thread Mark Leone
Dave, thanks very much for your help. Unfortunately, the passage you quoted is referring to how the password is digested when it is stored in the realm. This is working fine for me, and I've been able to configure it to use SHA-1 or MD-5 algorithms by setting the digest attribute in

Re: DIGEST authentication; Does it work??

2005-03-23 Thread Mark Leone
Dave, thanks very much for your help. Unfortunately, the passage you quoted is referring to how the password is digested when it is stored in the realm. This is working fine for me, and I've been able to configure it to use SHA-1 or MD-5 algorithms by setting the digest attribute in

Re: DIGEST authentication; Does it work??

2005-03-23 Thread Mark Leone
or me, and I've been able to configure it to use SHA-1 or MD-5 algorithms by setting the digest attribute in the element to either "SHA" or "MD5", which are the appropriate keywords to identify those algorithms. What I described above works fine when I select BASIC authe

Re: REPOST - Digest Authentication with Memory Realm

2002-05-15 Thread Rick Fincher
Hi Shimon, Those browser versions probably don't support Digest authentication. The default is Base 64 encoding (not encryption) so at least your password don't go as clear text. If you don't want to use HTTPS you'll have to use form based authentication and put an ap

Re: REPOST: JDBCRealm digest="MD5" returns NullPointerException

2002-02-27 Thread Knight, Digby
Sorry - forget that message - I seem to have a problem with the error handling page not defining the exception object even though I've set isErrorPage="true". Strange. The information in this e-mail and any attachments (the 'e-mail') is confidential and intended solely for the addressee(s) nam

REPOST: Tomcat 4.1.18: Digest authentication not working?

2003-01-06 Thread KUMAR,PANKAJ (HP-Cupertino,ex1)
Hi, I am resposting this message as I did not get any answer/comment/advice. Has anyone ever got Digest authentication working with Tomcat? -Original Message- From: KUMAR,PANKAJ (HP-Cupertino,ex1) [mailto:[EMAIL PROTECTED]] Subject: Tomcat 4.1.18: Digest authentication not working? Hi

[OT] Digest List of Tomcat List(s)

2003-10-31 Thread Tetsuya Kitahata
http://jakarta.apache.org/site/mail2.html#Tomcat (I modified/updated this page and committed a little while ago :-D Did you all know that you can subscribe to "Daily Digest" user/dev list(s) of Tomcat? :-) Happy mailing! -- Tetsuya. ([EMAIL

How can I create a digest password

2005-04-13 Thread Lorenzo Jiménez
Hi, I need help to generate encrypted passwords. Using the Tomcat 5's documentation: C:\>java org.apache.catalina.realm.RealmBase -a MD5 mypassd And this is the error message: "Exception in thread "main" java.lang.NoClassDefFoundError: org/apache/catalina/realm/RealmBase" I also checked the c

Digest authentication with JDBCRealm: doesn't seems to work

2002-11-06 Thread Iran Marcius
Hi. I'm trying to do a digest authentication using a JDBCRealm with SHA digest. Here is my context: And here is my relevant lines in web.xml: DIGEST When I use the BASIC method, as a lot of people wrote before, everything works fine, but with DIGEST met

Digest authentication with JDBCRealm: doesn't seems to work

2002-11-07 Thread Iran Marcius
Hi. I'm trying to use digest authentication with JDBCRealm and SHA algorithm, but it doesn't seems to work. Here is my context: And here is my relevant lines in web.xml: DIGEST When I use BASIC method, as a lot of people wrote before, everything works

  1   2   >