Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Bill Barker
; >> >> >> This will cause Tomcat to use your Authenticator instead of one of it's >> own. >> >>> On Jun 7, 2007, at 5:06 PM, Caldarale, Charles R wrote: >>> >>>>> From: Andrei Tchijov [mailto:[EMAIL PROTECTED] &

Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Andrei Tchijov
s will cause Tomcat to use your Authenticator instead of one of it's own. On Jun 7, 2007, at 5:06 PM, Caldarale, Charles R wrote: From: Andrei Tchijov [mailto:[EMAIL PROTECTED] Subject: Re: Is it possible to introduce new authentication method without modifying tomcat? I was just comment

Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Bill Barker
cator instead of one of it's own. > On Jun 7, 2007, at 5:06 PM, Caldarale, Charles R wrote: > >>> From: Andrei Tchijov [mailto:[EMAIL PROTECTED] >>> Subject: Re: Is it possible to introduce new authentication >>> method without modifying tomcat? >>> >

Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andrei, Check out securityfilter (http://securityfilter.sourceforge.net). It implements a filter as suggested by someone else, but it has been used by others. Why reinvent the wheel? There are two different interfaces that you can implement in order

RE: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Caldarale, Charles R
> From: Andrei Tchijov [mailto:[EMAIL PROTECTED] > Subject: Re: Is it possible to introduce new authentication > method without modifying tomcat? > > My problem it twofold. In order to make an > authentication decision ... > - I need to have an access to some informat

Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Andrei Tchijov
[mailto:[EMAIL PROTECTED] Subject: Re: Is it possible to introduce new authentication method without modifying tomcat? I was just commenting that I can not see how JAASRealm (or any Realm for that matter) can help me Specifying JAASRealm as the gives you the opportunity to implement your own

RE: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Caldarale, Charles R
> From: Andrei Tchijov [mailto:[EMAIL PROTECTED] > Subject: Re: Is it possible to introduce new authentication > method without modifying tomcat? > > I was just commenting that I can not see how JAASRealm > (or any Realm for that matter) can help me Specifying JAASRealm as

Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Andrei Tchijov
that I can not see how JAASRealm (or any Realm for that matter) can help me Andrei On Jun 7, 2007, at 4:47 PM, Caldarale, Charles R wrote: From: Andrei Tchijov [mailto:[EMAIL PROTECTED] Subject: Re: Is it possible to introduce new authentication method without modifying tomcat? Nowhere in

RE: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Caldarale, Charles R
> From: Andrei Tchijov [mailto:[EMAIL PROTECTED] > Subject: Re: Is it possible to introduce new authentication > method without modifying tomcat? > > Nowhere in the code I can see any indication of how to get > to HTTP Request and HTTP Response from Realm code. Why would y

Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Andrei Tchijov
I will be first to admin that I may be silly bugger, but I can not see how JAASRealm can help me. Nowhere in the code I can see any indication of how to get to HTTP Request and HTTP Response from Realm code. Please enlighten... Andrei On Jun 7, 2007, at 12:47 PM, Pid wrote: Andrei Tchi

Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Pid
Andrei Tchijov wrote: Hi, I want to be able to add my own authentication method (login-config/auth-method) as one of possible choices. Is it possible to do so without re-compiling tomcat? Ideally, I would love to be able to achieve my goal by changing server.xml file (and adding some jar

Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Andrei Tchijov
sZabi, Thnkx for response. I am actually already using similar approach. It is easy to implement, but it has one problem (from my point of view). It is not very "user friendly". It is much easier to explain to end user that if he/she is using "FORM" as authentication method, all he/she

Re: Is it possible to introduce new authentication method without modifying tomcat?

2007-06-07 Thread Szabolcs Márton
Hi! its an options, i use sometime. Create a filter. a class likes this. public class AuthenticationFilter implements Filter { private static Logger log = Logger.getLogger(AuthenticationFilter.class); public void doFilter(ServletRequest request, ServletResponse response, Filte