Ok, what project do we need to checkout to fix this in the
documentation?  I'll fix the 4.1 docs if someone will point me at them.
--Angus

> -----Original Message-----
> From: Duane Winner [mailto:[EMAIL PROTECTED] 
> Sent: Tuesday, April 20, 2004 6:15 PM
> To: Tomcat Users List
> Cc: Arend P. van der Veen
> Subject: Re: problem with apache authentication - jk2 - tomcat?
> 
> 
> Update:
> 
> I found the solution by googling around:
> 
> Edit conf/server.xml, and add the 
> 'tomcatAuthentication=false' snipet to 
> the 8009 connector section:
> 
> <Connector port="8009"
>      enableLookups="false" redirectPort="8443" debug="0"
>      protocol="AJP/1.3" tomcatAuthentication="false"/>
> 
> This fixed my problem.
> The related posts that I found related to older versions of 
> Tomcat and 
> the connector, but it seems to apply with 5.0 as well.
> 
> 
> 
> Duane Winner wrote:
> > Hello all,
> > 
> > I'm having a problem getting Apache authentication 
> credentials passed on 
> > to Tomcat servlets.
> > 
> > I am running:
> > FreeBSD 4.9
> > Apache2 (FreeBSD port)
> > Tomcat 5.0 (FreeBSD port)
> > mod_jk2 (built from jk2-2.0.2 source)
> > 
> > I can connect to sample Tomcat servlets through Apache 
> fine, but once I 
> > turn on  Apache authentication, my servlets don't work, 
> because they 
> > need to match the Apache credentials with a MySQL table.
> > 
> > We use FakeBasicAuth, matching the user DN with the DN in 
> the database, 
> > but I'm just trying with regular BasicAuth for now, and 
> that doesn't 
> > seem to work either.
> > 
> > We are porting from JRun (which works fine, but is on a 
> RedHat box) and 
> > we're using mod_jrun on that, not jk2.
> > 
> > I installed the "SnoopServlet" to see what was going on, 
> and as you can 
> > see from my output below, the "Remote user" parameter is 
> being returned 
> > as "null". But other client-side info is getting passed 
> along, such as 
> > IP address, browser, etc. I know that Apache authentication 
> is working 
> > with both Basic Auth and FakeBasicAuth because I can see my 
> user name 
> > (or DN) in the logs after I type my username and password 
> when prompted 
> > by the browser (or send my client cert when using FakeBasicAuth).
> > 
> > Is there something I can do to fix this or is there 
> something wrong with 
> > mod_jk2? Anybody else have this problem?
> > 
> > Thanks so much for any info,
> > [EMAIL PROTECTED]
> > 
> > 
> > Results of SnoopServlet:
> > 
> > Requested URL:
> > https://my.site.here/library/servlet/SnoopServlet
> > 
> > Request information:
> >  Request method: GET
> >  Request URI: /library/servlet/SnoopServlet
> >  Request protocol: HTTP/1.1
> >  Servlet path: /servlet/SnoopServlet
> >  Path info: <none>
> >  Path translated: <none>
> >  Query string: <none>
> >  Content length: 0
> >  Content type: <none>
> >  Server name: my.site.here
> >  Server port: 443
> >  Remote user: <none>
> >  Remote address: 10.10.100.87
> >  Remote host: 10.10.100.87
> >  Authorization scheme: <none>
> > 
> > Request headers:
> >  host: my.site.here
> >  user-agent: Mozilla/5.0 (X11; U; FreeBSD i386, en-US; rv:1.6) 
> > Gecko/20040410
> >  accept: 
> > 
> text/xml,application/xml,application/xhtml+xml,text/html;q=0.9
> ,text/plain;q=0.8,image/png,image/jpeg,image/gif;q=0.2,*/*;q=0.1 
> > 
> >  accept-language: en-us,en;q=0.5
> >  accept-encoding: gzip,deflate
> >  accept-charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
> >  Keep-Alive: 300
> >  connection: keep-alive
> >  authorization: Basic ZHdpbm5lcjo5cGhpbHM5Mw==
> >  content-length: 0
> > 
> > 
> ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> > 
> > 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to