Re: Authentication and roles (RFE)

2010-12-17 Thread Pid
On 17/12/2010 08:27, Mark Thomas wrote: > On 17/12/2010 07:36, Pid * wrote: >> On 17 Dec 2010, at 00:37, Steve Mitchell wrote: >> >>> I would like my Tomcat instance to authenticate different roles >>> differently. E.g., admins must use SSL client auth, while regular users >>> use HTTP basic au

Re: Authentication and roles (RFE)

2010-12-17 Thread Mark Thomas
On 17/12/2010 07:36, Pid * wrote: > On 17 Dec 2010, at 00:37, Steve Mitchell wrote: > >> I would like my Tomcat instance to authenticate different roles differently. >> E.g., admins must use SSL client auth, while regular users use HTTP basic >> authentication over SSL. This seems like a rout

Re: Authentication and roles (RFE)

2010-12-16 Thread Pid *
On 17 Dec 2010, at 00:37, Steve Mitchell wrote: > I would like my Tomcat instance to authenticate different roles differently. > E.g., admins must use SSL client auth, while regular users use HTTP basic > authentication over SSL. This seems like a routine requirement, but it's > unsupported

Authentication and roles (RFE)

2010-12-16 Thread Steve Mitchell
I would like my Tomcat instance to authenticate different roles differently. E.g., admins must use SSL client auth, while regular users use HTTP basic authentication over SSL. This seems like a routine requirement, but it's unsupported in Tomcat 6 (or 7). I have a workaround -- use an Apache