Larry Rogers wrote:
> I haven't gotten any response on whether 3.2 or 4.0 will support database based
> authentication and container managed security. The best I was able to determine
> from the archives before posting my question was that 3.2 with JDBC realm module
> could handle the user/password list in a database, but container managed
> security would have to wait for 4.0.
>
> Based on that shaky information, I'll have to go with JRun 3.0 for production
> use until Tomcat 4.0. Is that correct?
>
Tomcat 3.2 supports container managed security as well -- the differences are in
which login methods are supported -- both versions support BASIC and FORM-BASED,
while 4.0 also supports DIGEST and CLIENT-CERT.
In either case, you will be configuring the JDBC realm object in the server.xml file
-- the details differ slightly, but the same basic concepts apply to both versions.
>
> Larry
Craig
