The problem is the next: I have a webApp (called RS) running in Tomcat; http://sscllinuxora03.santiago.cl.jpmorganchase.com:8084/RS
Now I put SSO (SiteMinder) to my app, for that I had to use apache, because the SSO work with apache. So, the url that I have to use is http://sscllinuxora03.santiago.cl.jpmorganchase.com When I go there, I'm authenticated and if everything is ok (with my user/pass) this SSO add some extra-headers like this: header=SM_USER=w024461 header=SM_USERDN=uid=W024461,ou=People,dc=bankone,dc=net After that I'm re-directed to http://sscllinuxora03.santiago.cl.jpmorganchase.com:8084 It's mean the tomcat home page, the root level (/). This configuration is located in both: 1 - /etc/httpd/conf/httpd.conf LoadModule jk_module modules/mod_jk-1.2.25-httpd-2.0.59.so JkWorkersFile /etc/httpd/conf/workers.properties JkShmFile /var/log/httpd/mod_jk.shm JkLogFile /var/log/httpd/mod_jk.log JkLogLevel debug JkLogStampFormat "[%a %b %d %H:%M:%S %Y] " JkMount / worker1 2- /etc/httpd/conf/workers.propertie workers.tomcat_home=/home/tigger/jakarta-tomcat-5.0.28 worker.list=worker1 worker.worker1.type=ajp13 worker.worker1.host=sscllinuxora03.santiago.cl.jpmorganchase.com worker.worker1.port=8009 If in this point, I try to get the extra-headers, I can ge it, for that I used: <Valve className="org.apache.catalina.valves.RequestDumperValve"/> That mean, the extra-headers that SiteMinder (SSO) is putting in the request are coming to Tomcat. Untils here all is ok. But now I don't know what configuration I should do it if I wanna be re-direct to mi wepApp; http://sscllinuxora03.santiago.cl.jpmorganchase.com:8084/RS passing the extra-headers without lossing them. Need I make some configurations on: /home/tigger/jakarta-tomcat-5.0.28/webapps/RS/WEB-INF/web.xml or: /home/tigger/jakarta-tomcat-5.0.28/conf/server.xml Thanks a lot !!! ----------------------------------------- This communication is for informational purposes only. It is not intended as an offer or solicitation for the purchase or sale of any financial instrument or as an official confirmation of any transaction. All market prices, data and other information are not warranted as to completeness or accuracy and are subject to change without notice. Any comments or statements made herein do not necessarily reflect those of JPMorgan Chase & Co., its subsidiaries and affiliates. This transmission may contain information that is privileged, confidential, legally privileged, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. Although this transmission and any attachments are believed to be free of any virus or other defect that might affect any computer system into which it is received and opened, it is the responsibility of the recipient to ensure that it is virus free and no responsibility is accepted by JPMorgan Chase & Co., its subsidiaries and affiliates, as applicable, for any loss or damage arising in any way from its use. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. Please refer to http://www.jpmorgan.com/pages/disclosures for disclosures relating to UK legal entities.