Re: CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Pid
On 27/08/2010 15:16, Michael Dockery wrote: Can anyone tell me what class/method i would need to override to make a client x509 cert subject/dn attribute to a valid tomcat username (in memory realm or otherwise) I assume the authenticator method or perhaps the login method... Please

RE: CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Caldarale, Charles R
From: Michael Dockery [mailto:dockeryjava...@yahoo.com] Subject: CLIENT-AUTH x509 attribute mapping to user name Can anyone tell me what class.method  Can anyone tell me what Tomcat version you're using? which I would need to override   to map a client x509 cert subject/dn attribute     

Re: CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Michael Dockery
/CASUM/X.509+Certificates From: Caldarale, Charles R chuck.caldar...@unisys.com To: Tomcat Users List users@tomcat.apache.org Sent: Fri, August 27, 2010 1:12:24 PM Subject: RE: CLIENT-AUTH x509 attribute mapping to user name From: Michael Dockery [mailto:dockeryjava

Re: CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Mark Thomas
On 27/08/2010 18:33, Michael Dockery wrote: Our usernames are not named exactly the same as the x509 cert 'subject' attr. (or any other attr) I was hoping i could do some mapping to match a client cert (attr) to an existing tomcat username ...perhaps similar to the way it