RE: Tomcat 8 and authenticating Basic Auth users

2018-10-15 Thread Tony Esposito
l Message- > From: André Warnier (tomcat) [mailto:a...@ice-sa.com] > Sent: Sunday, October 14, 2018 3:58 PM > To: users@tomcat.apache.org > Subject: Re: Tomcat 8 and authenticating Basic Auth users > > On 14.10.2018 18:44, Tony Esposito wrote: >> Hello André, >>

Re: Tomcat 8 and authenticating Basic Auth users

2018-10-15 Thread tomcat
) [mailto:a...@ice-sa.com] Sent: Sunday, October 14, 2018 5:55 AM To: users@tomcat.apache.org Subject: Re: Tomcat 8 and authenticating Basic Auth users On 14.10.2018 02:29, Tony Esposito wrote: Hello André, It's routed through a server... A co-worker noticed a Tomcat valve that might do the trick..

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-15 Thread Tony Esposito
give 1 (or maybe both) a try. Thank you. Tony -Original Message- From: André Warnier (tomcat) [mailto:a...@ice-sa.com] Sent: Sunday, October 14, 2018 3:58 PM To: users@tomcat.apache.org Subject: Re: Tomcat 8 and authenticating Basic Auth users On 14.10.2018 18:44, Tony Esposito wrote: &

Re: Tomcat 8 and authenticating Basic Auth users

2018-10-14 Thread tomcat
oes not have any such security constraints ? I would assume not, but just in case.. Tony -Original Message- From: André Warnier (tomcat) [mailto:a...@ice-sa.com] Sent: Saturday, October 13, 2018 4:38 PM To: users@tomcat.apache.org Subject: Re: Tomcat 8 and authenticating Basic Auth user

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-14 Thread Tony Esposito
October 14, 2018 5:55 AM To: users@tomcat.apache.org Subject: Re: Tomcat 8 and authenticating Basic Auth users On 14.10.2018 02:29, Tony Esposito wrote: > Hello André, > > It's routed through a server... > A co-worker noticed a Tomcat valve that might do the trick... > https://gith

Re: Tomcat 8 and authenticating Basic Auth users

2018-10-14 Thread tomcat
onstraints ? I would assume not, but just in case.. Tony -Original Message- From: André Warnier (tomcat) [mailto:a...@ice-sa.com] Sent: Saturday, October 13, 2018 4:38 PM To: users@tomcat.apache.org Subject: Re: Tomcat 8 and authenticating Basic Auth users On 13.10.2018 18:54, Tony Es

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-13 Thread Tony Esposito
er 13, 2018 4:38 PM To: users@tomcat.apache.org Subject: Re: Tomcat 8 and authenticating Basic Auth users On 13.10.2018 18:54, Tony Esposito wrote: > Hello André, > > Thank you for taking the time to put together this excellent explanation. > > I do not have control over the server th

Re: Tomcat 8 and authenticating Basic Auth users

2018-10-13 Thread tomcat
s there. But it "activates" only when it is told to activate. Thank you again for your time Tony -Original Message- From: André Warnier (tomcat) [mailto:a...@ice-sa.com] Sent: Saturday, October 13, 2018 7:53 AM To: users@tomcat.apache.org Subject: Re: Tomcat 8 and authentic

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-13 Thread Tony Esposito
re it, then tough luck, because the two go together. You cannot eat your cake and have it. The only way you could achieve that, is by writing your own "Realm", which always responds OK, no matter what the client-id/pw are. But there you are in uncharted and unsupported territory, so beware.

Re: Tomcat 8 and authenticating Basic Auth users

2018-10-13 Thread tomcat
r what the client-id/pw are. But there you are in uncharted and unsupported territory, so beware. Tony -Original Message- From: André Warnier (tomcat) [mailto:a...@ice-sa.com] Sent: Friday, October 12, 2018 6:54 PM To: users@tomcat.apache.org Subject: Re: Tomcat 8 and authenticating Basic Auth

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Tony Esposito
t) [mailto:a...@ice-sa.com] Sent: Friday, October 12, 2018 6:54 PM To: users@tomcat.apache.org Subject: Re: Tomcat 8 and authenticating Basic Auth users On 13.10.2018 00:04, Tony Esposito wrote: > Addendum: > The user "myuser" attempts to authenticate once, fails, and on the seco

Re: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread tomcat
NF/web.xml file in it. What does it say about authentication ? Tony -Original Message- From: Tony Esposito Sent: Friday, October 12, 2018 4:42 PM To: Tomcat Users List Cc: Tony Esposito Subject: RE: Tomcat 8 and authenticating Basic Auth users Hi Christopher, The 'web server in

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Tony Esposito
asic Auth (that is received in the header). Tony -Original Message- From: Tony Esposito Sent: Friday, October 12, 2018 4:42 PM To: Tomcat Users List Cc: Tony Esposito Subject: RE: Tomcat 8 and authenticating Basic Auth users Hi Christopher, The 'web server in question&

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Tony Esposito
ch...@christopherschultz.net] Sent: Friday, October 12, 2018 3:33 PM To: users@tomcat.apache.org Subject: Re: Tomcat 8 and authenticating Basic Auth users -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tony, On 10/12/18 16:24, Tony Esposito wrote: > Some very good feedback here. Than

Re: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Christopher Schultz
h...@christopherschultz.net] Sent: Friday, October 12, > 2018 3:07 PM To: users@tomcat.apache.org Subject: Re: Tomcat 8 and > authenticating Basic Auth users > > Tony, > > On 10/12/18 15:41, Tony Esposito wrote: >> Concerning tomcat-user.xml versus database: The number of use

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Tony Esposito
t: Re: Tomcat 8 and authenticating Basic Auth users -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tony, On 10/12/18 15:41, Tony Esposito wrote: > Concerning tomcat-user.xml versus database: The number of users has > increased by an order of 2 magnitudes AND we don't know ahead of t

Re: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Christopher Schultz
hem. Tomcat will also happily pass that information to your application even if those headers are being used for authentication and authorization. - -chris > -Original Message- From: Christopher Schultz > [mailto:ch...@christopherschultz.net] Sent: Friday, October 12, > 2018 2:25 PM To: us

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Tony Esposito
To: users@tomcat.apache.org Subject: Re: Tomcat 8 and authenticating Basic Auth users -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tony, On 10/12/18 14:45, Tony Esposito wrote: > Thank you André for this feedback. > > If I may, I wish to approach this from another angle. (The user &g

Re: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Christopher Schultz
rd for a terminal and then stamping the username and password on the monitor. You may as well remove the challenge. - -chris > -Original Message- From: André Warnier (tomcat) > [mailto:a...@ice-sa.com] Sent: Friday, October 12, 2018 11:29 AM To: > users@tomcat.apache.org Subje

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Tony Esposito
Services O: 972-348-1284 -Original Message- From: André Warnier (tomcat) [mailto:a...@ice-sa.com] Sent: Friday, October 12, 2018 11:29 AM To: users@tomcat.apache.org Subject: Re: Tomcat 8 and authenticating Basic Auth users Hi. On 12.10.2018 16:38, Tony Esposito wrote: > He

Re: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread tomcat
Hi. On 12.10.2018 16:38, Tony Esposito wrote: Hello, Using Tomcat 8.0.22 on Linux CentOS 6.10: Trying to setup Tomcat to authenticate users that use Basic Auth. I could (possibly) enter these users into the tomcat-users.xml file but we are de

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-12 Thread Tony Esposito
Hello, Using Tomcat 8.0.22 on Linux CentOS 6.10: Trying to setup Tomcat to authenticate users that use Basic Auth. I could (possibly) enter these users into the tomcat-users.xml file but we are dealing with 1000 potential users. Wh