Re: Tomcat7: debugging realms - a howto?

2015-03-13 Thread Konstantin Kolinko
2015-03-13 23:43 GMT+03:00 Graham Leggett : > On 13 Mar 2015, at 9:58 PM, Neven Cvetkovic wrote: > >> Just to confirm, the 403 Forbidden page was rendered by Tomcat, not Apache >> HTTPD? > > Yes, it is branded tomcat and appears in the tomcat access log. > >> I don't expect it is an Apache issue h

Re: Switching basic auth to client-cert with realms - how?

2015-03-13 Thread Neven Cvetkovic
Graham, On Fri, Mar 13, 2015 at 4:49 PM, Graham Leggett wrote: > On 13 Mar 2015, at 10:34 PM, Neven Cvetkovic > wrote: > > >>> What doesn’t seem to fit is the realm definition - specifying > userCredCol > >>> is marked as mandatory, but this is obviously not present with a client > >>> certific

Re: Tomcat7: debugging realms - a howto?

2015-03-13 Thread Konstantin Kolinko
2015-03-13 22:02 GMT+03:00 Graham Leggett : > Hi all, > > I have a working realm installation using basic authentication, which I need > to switch to client certificate authentication. Having done so it doesn’t > work, I just get “forbidden”, with no indication of the error involved. > > Back in

Re: Tomcat7: debugging realms - a howto?

2015-03-13 Thread Neven Cvetkovic
Graham, On Fri, Mar 13, 2015 at 4:43 PM, Graham Leggett wrote: > On 13 Mar 2015, at 9:58 PM, Neven Cvetkovic > wrote: > > > Just to confirm, the 403 Forbidden page was rendered by Tomcat, not > Apache > > HTTPD? > > Yes, it is branded tomcat and appears in the tomcat access log. Great. We kno

Re: Switching basic auth to client-cert with realms - how?

2015-03-13 Thread Graham Leggett
On 13 Mar 2015, at 10:34 PM, Neven Cvetkovic wrote: >>> What doesn’t seem to fit is the realm definition - specifying userCredCol >>> is marked as mandatory, but this is obviously not present with a client >>> certificate. What do you specify in this field? >>> >> > You define the password colu

Re: Tomcat7: debugging realms - a howto?

2015-03-13 Thread Graham Leggett
On 13 Mar 2015, at 9:58 PM, Neven Cvetkovic wrote: > Just to confirm, the 403 Forbidden page was rendered by Tomcat, not Apache > HTTPD? Yes, it is branded tomcat and appears in the tomcat access log. > I don't expect it is an Apache issue here - because you mentioned your > application worked

Re: Switching basic auth to client-cert with realms - how?

2015-03-13 Thread Neven Cvetkovic
Graham, On Fri, Mar 13, 2015 at 3:39 PM, Graham Leggett wrote: > >> What doesn’t seem to fit is the realm definition - specifying userCredCol >> is marked as mandatory, but this is obviously not present with a client >> certificate. What do you specify in this field? >> > You define the password

Re: Switching basic auth to client-cert with realms - how?

2015-03-13 Thread Neven Cvetkovic
Graham, On Fri, Mar 13, 2015 at 3:39 PM, Graham Leggett wrote: > Hi all, > > I have a basic authentication setup that works great as below. > > > BASIC > Patricia > > > > > administrator > > >

Re: Tomcat7: debugging realms - a howto?

2015-03-13 Thread Neven Cvetkovic
Graham, On Fri, Mar 13, 2015 at 3:02 PM, Graham Leggett wrote: > Hi all, > > I have a working realm installation using basic authentication, which I > need to switch to client certificate authentication. Having done so it > doesn’t work, I just get “forbidden”, with no indication of the error >

Switching basic auth to client-cert with realms - how?

2015-03-13 Thread Graham Leggett
Hi all, I have a basic authentication setup that works great as below. BASIC Patricia administrator underwriter accountant

Tomcat7: debugging realms - a howto?

2015-03-13 Thread Graham Leggett
Hi all, I have a working realm installation using basic authentication, which I need to switch to client certificate authentication. Having done so it doesn’t work, I just get “forbidden”, with no indication of the error involved. Back in the day there was a simple “debug” flag that turned on d

Re: Migration from Tomcat6-Cluster to Tomcat7-Cluster: Digest Authentication problem

2015-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rainer, On 3/13/15 12:15 PM, Rainer Jung wrote: > Am 13.03.2015 um 16:28 schrieb Christopher Schultz: >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 >> >> Mark, >> >> On 3/12/15 1:13 PM, Mark Thomas wrote: >>> On 12/03/2015 15:20, Sascha Skoru

Re: Windows authentication : outdated link

2015-03-13 Thread Konstantin Kolinko
2015-03-13 15:13 GMT+03:00 Konstantin Kolinko : > 2015-03-13 15:04 GMT+03:00 André Warnier : >> Hi. >> >> Errata : >> >> In the page >> http://tomcat.apache.org/tomcat-8.0-doc/windows-auth-howto.html#References >> (and also in the corresponding Tomcat 7 page), the link to >> >> Geronimo configurati

Re: Migration from Tomcat6-Cluster to Tomcat7-Cluster: Digest Authentication problem

2015-03-13 Thread Rainer Jung
Am 13.03.2015 um 16:28 schrieb Christopher Schultz: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 3/12/15 1:13 PM, Mark Thomas wrote: On 12/03/2015 15:20, Sascha Skorupa wrote: Hi, here: http://grokbase.com/t/tomcat/users/13bvsbwb8s/multiple-servers-and-digest-authentication

Re: Issues with SSL to resolve poodle vulnerability

2015-03-13 Thread André Warnier
Kaydell Leavitt wrote: Unsubscribe please. 1) don't top post. 2) scroll down to the very bottom and read the fine instructions repeated in every message on this list. P.S. Duh ! -- Kaydell kayd...@yahoo.com On Mar 13, 2015, at 8:17 AM, MICHELLE RENEE LARSON wrote: We use a software

Re: AW: Migration from Tomcat6-Cluster to Tomcat7-Cluster: Digest Authentication problem

2015-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 3/12/15 1:13 PM, Mark Thomas wrote: > On 12/03/2015 15:20, Sascha Skorupa wrote: >> Hi, >> >> here: >> >> http://grokbase.com/t/tomcat/users/13bvsbwb8s/multiple-servers-and-digest-authentication >> >> >> the same problem is described and

Re: Form-based authentication breaks after upgrade to Tom 7.0.59

2015-03-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rop, On 3/12/15 7:10 PM, rop wrote: > Hi Chris, Yes, we are applying salt before hashing (to prevent > googling up many passwords from the hashes). Depending upon how you are storing the salt, you may be able to use Tomcat out of the box, now, beca

Re: Issues with SSL to resolve poodle vulnerability

2015-03-13 Thread Kaydell Leavitt
Unsubscribe please. -- Kaydell kayd...@yahoo.com On Mar 13, 2015, at 8:17 AM, MICHELLE RENEE LARSON wrote: > We use a software called iDashboards it is tomcat running on windows I > have installed an SSL and when you go to the site > https://idashboards-dev.outreach.psu.edu/idashboards/ it sh

Re: Issues with SSL to resolve poodle vulnerability

2015-03-13 Thread Daniel Mikusa
On Fri, Mar 13, 2015 at 10:17 AM, MICHELLE RENEE LARSON wrote: > We use a software called iDashboards it is tomcat running on windows I > have installed an SSL and when you go to the site > https://idashboards-dev.outreach.psu.edu/idashboards/ it shows that the > SSL is installed and you connect

Issues with SSL to resolve poodle vulnerability

2015-03-13 Thread MICHELLE RENEE LARSON
We use a software called iDashboards it is tomcat running on windows I have installed an SSL and when you go to the site https://idashboards-dev.outreach.psu.edu/idashboards/ it shows that the SSL is installed and you connect via https however when you go to an ssl checker it says no ssl if install

Re: Windows authentication : outdated link

2015-03-13 Thread Konstantin Kolinko
2015-03-13 15:04 GMT+03:00 André Warnier : > Hi. > > Errata : > > In the page > http://tomcat.apache.org/tomcat-8.0-doc/windows-auth-howto.html#References > (and also in the corresponding Tomcat 7 page), the link to > > Geronimo configuration for Windows authentication > > leads to : > > https://cw

Windows authentication : outdated link

2015-03-13 Thread André Warnier
Hi. Errata : In the page http://tomcat.apache.org/tomcat-8.0-doc/windows-auth-howto.html#References (and also in the corresponding Tomcat 7 page), the link to Geronimo configuration for Windows authentication leads to : https://cwiki.apache.org/GMOxDOC21/using-spengo-in-geronimo.html#UsingSp