Re: Container managed security and Proxy support

2010-10-21 Thread Pid
On 21/10/2010 08:46, André Warnier wrote: > Pid wrote: >> On 20/10/2010 17:02, Oliver Wulff wrote: >>> Thanks. To recap, I configure AJP13 with tomcatAuthentication equals to >>> false but I still need the login-config and security-constraints in the >>> web.xml... >>> >>> Where can I let tomcat kn

Re: Container managed security and Proxy support

2010-10-21 Thread André Warnier
Pid wrote: On 20/10/2010 17:02, Oliver Wulff wrote: Thanks. To recap, I configure AJP13 with tomcatAuthentication equals to false but I still need the login-config and security-constraints in the web.xml... Where can I let tomcat know to which roles a user belongs to? That has to be done via

Re: Container managed security and Proxy support

2010-10-20 Thread Pid
On 20/10/2010 17:02, Oliver Wulff wrote: > Thanks. To recap, I configure AJP13 with tomcatAuthentication equals to > false but I still need the login-config and security-constraints in the > web.xml... > > Where can I let tomcat know to which roles a user belongs to? That has to be done via Realm

Re: Container managed security and Proxy support

2010-10-20 Thread Oliver Wulff
Thanks. To recap, I configure AJP13 with tomcatAuthentication equals to false but I still need the login-config and security-constraints in the web.xml... Where can I let tomcat know to which roles a user belongs to? Thanks Oliver

Re: Container managed security and Proxy support

2010-10-20 Thread Pid
On 20/10/2010 16:46, Oliver Wulff wrote: > > src="http://zdownload.zurich.com/mailimages/ZHP_MailHeader.gif"; /> > > Hi there > > Different Realms are already provided by Tomcat to configure the > authentication. This allows the application developer to use the standard > Servlet API to retriev

Container managed security and Proxy support

2010-10-20 Thread Oliver Wulff
http://zdownload.zurich.com/mailimages/ZHP_MailHeader.gif"; /> Hi there Different Realms are already provided by Tomcat to configure the authentication. This allows the application developer to use the standard Servlet API to retrieve security related informations like username and whether the u