CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Michael Dockery
Can anyone tell me what class/method i would need to override  to make a client x509 cert subject/dn attribute   to a valid tomcat username (in memory realm or otherwise) I assume the authenticator method  or perhaps the login method...

Re: CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Pid
On 27/08/2010 15:16, Michael Dockery wrote: Can anyone tell me what class/method i would need to override to make a client x509 cert subject/dn attribute to a valid tomcat username (in memory realm or otherwise) I assume the authenticator method or perhaps the login method... Please

CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Michael Dockery
Can anyone tell me what class.method   which I would need to override   to map a client x509 cert subject/dn attribute     to a valid tomcat username (in memory realm or otherwise)   I assume the authenticator method    or perhaps the login method...

RE: CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Caldarale, Charles R
From: Michael Dockery [mailto:dockeryjava...@yahoo.com] Subject: CLIENT-AUTH x509 attribute mapping to user name Can anyone tell me what class.method  Can anyone tell me what Tomcat version you're using? which I would need to override   to map a client x509 cert subject/dn attribute

Re: CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Michael Dockery
/CASUM/X.509+Certificates From: Caldarale, Charles R chuck.caldar...@unisys.com To: Tomcat Users List users@tomcat.apache.org Sent: Fri, August 27, 2010 1:12:24 PM Subject: RE: CLIENT-AUTH x509 attribute mapping to user name From: Michael Dockery [mailto:dockeryjava

Re: CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Mark Thomas
On 27/08/2010 18:33, Michael Dockery wrote: Our usernames are not named exactly the same as the x509 cert 'subject' attr. (or any other attr) I was hoping i could do some mapping to match a client cert (attr) to an existing tomcat username ...perhaps similar to the way it