-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Chuck,

Caldarale, Charles R wrote:
|> From: Alex Mestiashvili
|> [mailto:[EMAIL PROTECTED]
|> Subject: allow access without auth to app from several ip
|> ranges , but leaveauth from any other hosts
|>
|> I have basic authentication for my tomcat application .
|> Now I want , allow access without authentication to this app from
|> several ip ranges , but leave auth from any other hosts .
|
| Not sure if this will do it yet, but take a look at this package:
| http://sourceforge.net/projects/securityfilter/

Nope, we don't support that -- at least not directly. Of course, as
Filip suggests, you could always write your own realm (for either sf or TC).

| Despite the last release date of 2004, it is now under active
development again.

The 2004 code is also still just as good as it was in 2004. Not much has
changed in the servlet spec. ;)

My suggestion would be to deploy the application multiple times, and use
a RemoteAddressValve for those IP addresses which do not require
authentication (and, of course, remove the appropriate configuration
from web.xml for those copies of the application).

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkhS4AIACgkQ9CaO5/Lv0PA3XQCfWjWwqG4lDl77DewufS9m2xBB
NcgAoKbaXZhOIGV7GKt5lHPuNmlNswhJ
=hIW+
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to