Chris,
In the version of Tomcat I'm using 5.5.25, when I do what you are
suggesting, and set the config to:
<login-config>
<auth-method>FORM</auth-method>
<realm-name>demo</realm-name>
<form-login-config>
<form-login-page>/Shibboleth.sso/Login</form-login-page>
<form-error-page>/Shibboleth.sso/Login</form-error-page>
</form-login-config>
</login-config>
I get the following error, because those two page elements are relative
to the webapp and not to the host part of the URL:
HTTP Status 404 - /caladmin/Shibboleth.sso/Login
------------------------------------------------------------------------
*type* Status report
*message* _/caladmin/Shibboleth.sso/Login_
*description* _The requested resource (/caladmin/Shibboleth.sso/Login)
is not available._
------------------------------------------------------------------------
Apache Tomcat/5.5.25
I need it to redirect to /Shibboleth.sso/Login instead of
/(webapp)/Shibboleth.sso/Login. Any idea how I could do that in Tomcat
5.5.x?
Thanks!
Gary
Christopher Schultz wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gary,
Gary Weaver wrote:
| I'm having trouble finding a way (maybe it is because it isn't
| possible?) of making Tomcat send users to the relative URL
| "/Shibboleth.sso/Login" (not served by Tomcat) in order to login if
| the Tomcat session times out, etc.
Does it work to simply make your application's <form-login-page> point
to /Shibboleth.sso/Login? If you do that, what happens?
| Does anyone know of a way to redirect Tomcat to point at some other
| URL, specifically the relative URL "/Shibboleth.sso/Login" (not
| served by Tomcat)?
I think some versions of Tomcat do a server-side forward when the login
form is required, while other versions will do a redirect. If you can
get Tomcat to do a redirect, this ought to work. If it's attempting to
do a server-side forward, you may have to take other steps.
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkerHjgACgkQ9CaO5/Lv0PDEewCgsaWxeBEsPBa8VLQ4Ut8Y687c
5gYAn2IC0OWh7LTtZMq01y5jB07YI+Xp
=cEAC
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To start a new topic, e-mail: [email protected]
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
--
Gary Weaver
Internet Framework Services
Office of Information Technology
Duke University
---------------------------------------------------------------------
To start a new topic, e-mail: [email protected]
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
