Not sure; a quick test seemed to suggest this, but I may have been doing something wrong. If I have two hosts X and Y that resolve to the same IP, can I still use AJP to forward requests to the respective Tomcat host?

Regardless, I came across an old discussion [1], which suggests implementing a servlet filter to check the authenticated user against an ACL, and throwing a 403 if necessary. I hacked a filter together, placed the class file under /webapps/manager/WEB-INF/classes, mapped it to /text/* in /webapps/manager/WEB-INF/web.xml, and I was good to go!

Tim

[1] http://grokbase.com/t/tomcat.apache.org/users/2003/04/mananger-roles/10m2nulzpoufgawoj6xp2bfyxcr4

On 1/20/2012 5:00 PM, Christopher Schultz wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Tim,

On 1/20/12 10:35 AM, Tim De Pauw wrote:
Multiple hosts probably won't solve this problem either. I'm using
AJP, which doesn't seem to play well with vhosts.

Wait, what?

In what way does AJP not play well with vhosts?

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk8Zj6YACgkQ9CaO5/Lv0PBPYwCfbfYEdMGVGcSYcem+7PKmqZFB
VTkAn3P1JIFjt/shlOxlneGmnRz8wbst
=Zail
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


--
Tim De Pauw <tim.dep...@hogent.be>
Vakgroep Informatica
Geassocieerde faculteit Toegepaste Ingenieurswetenschappen
Hogeschool Gent
http://tiwi.be/

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to