Re: Tomcat 7 and securityfilter [or A Love Letter to markt]

2010-03-31 Thread Peter Crowther
On 30 March 2010 23:50, Mark Thomas ma...@apache.org wrote: I feel a Baldrick[1] moment coming on. Baldrick, what starts with 'Come here!' and ends with 'Ouch'? Dunno Baldrick, come here! slap Ouch! ... or was there a different moment you had in mind, Mark? :-) - Peter

RE: Tomcat 7 and securityfilter [or A Love Letter to markt]

2010-03-31 Thread Caldarale, Charles R
From: peter.crowth...@googlemail.com [mailto:peter.crowth...@googlemail.com] On Behalf Of Peter Crowther Subject: Re: Tomcat 7 and securityfilter [or A Love Letter to markt] Baldrick, what starts with 'Come here!' and ends with 'Ouch'? Dunno Baldrick, come here! slap Ouch! ...

Re: Tomcat 7 and securityfilter [or A Love Letter to markt]

2010-03-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 3/30/2010 6:50 PM, Mark Thomas wrote: On 30/03/2010 23:05, Christopher Schultz wrote: If Tomcat is moving to Filters rather than Valves, does that mean that Tomcat authentication will be done using Filters, or is there some other

Re: Tomcat 7 and securityfilter [or A Love Letter to markt]

2010-03-31 Thread Pid
On 31/03/2010 14:44, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 3/30/2010 6:50 PM, Mark Thomas wrote: On 30/03/2010 23:05, Christopher Schultz wrote: If Tomcat is moving to Filters rather than Valves, does that mean that Tomcat authentication will be

Re: Tomcat 7 and securityfilter [or A Love Letter to markt]

2010-03-31 Thread Mark Thomas
On 31/03/2010 14:44, Christopher Schultz wrote: I'm not sure about the ASF's desires, but moving sf into the ASF proper and having Tomcat simply use it as its authentication and authorization strategy would be the best result for everyone: I would (probably) get more help with the code, Tomcat

Re: Tomcat 7 and securityfilter [or A Love Letter to markt]

2010-03-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pid, On 3/31/2010 10:00 AM, Pid wrote: I'd be interested in (over)hearing that conversation, my specific interest being related to OAuth. Sure. Since the Tomcat 5.x Realms broke sf's ability to use the Tomcat Realms, I've found myself having to

Re: Tomcat 7 and securityfilter [or A Love Letter to markt]

2010-03-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 3/31/2010 10:06 AM, Mark Thomas wrote: This is probably now a discussion for the dev list. Okay, I'll join the dev list and post something soon. Note that any decision to move the code to the ASF would mean having to go via the

Re: Tomcat 7 and securityfilter [or A Love Letter to markt]

2010-03-31 Thread Mladen Turk
On 03/31/2010 04:06 PM, Mark Thomas wrote: On 31/03/2010 14:44, Christopher Schultz wrote: Note that any decision to move the code to the ASF would mean having to go via the incubator [1]. Unless it gets part of some TLP project. If it's a standalone component like, it can go to the Commons.

Tomcat 7 and securityfilter [or A Love Letter to markt]

2010-03-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, One of the major architectural changes I've heard about coming in Tomcat 7 is the removal of the Valve interface in favor of using the standard javax.servlet.Filter interface. IIRC, the current implementation of container-managed authentication

Re: Tomcat 7 and securityfilter [or A Love Letter to markt]

2010-03-30 Thread Mark Thomas
On 30/03/2010 23:05, Christopher Schultz wrote: All, One of the major architectural changes I've heard about coming in Tomcat 7 is the removal of the Valve interface in favor of using the standard javax.servlet.Filter interface. Getting Tomcat 7 to move from Valves towards Filters is one of