Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-23 Thread Jaikit Savla
Hi, You are right it does regrex matching. I wanted to say that it does not do any kind of dnslookup in filter.  @configuration: I do not have any particular configuration or firewall set up. I have mentioned below output from tcpdump (listening on loopback interface) and as you can see it get

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-23 Thread Konstantin Kolinko
2012/9/23 Jaikit Savla : > Hello Users, > > I have some admin api's which I want to have restricted access - such that > only if the request originates from localhost - it will execute. > For that I am using tomcat's RemoteAddrfilter > > > Remote Address Filter > > org.apache.catalin

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-23 Thread Konstantin Kolinko
2012/9/23 Martin Gainty : > > Jaikit > > You can ask Catalina to check the IP address, or host name, on every > incoming request directed to the surrounding elements > Engine, > Host, or > Context element. > The remote address or name will be checked against a configured list of > "a

Re: tomcat manager login

2012-09-23 Thread Mohsen Jamali
forgot to uncomment usernames and roles! excuse and thanks :) On Sat, Sep 22, 2012 at 3:31 PM, Tim Watts wrote: > On Sat, 2012-09-22 at 14:31 +0330, Mohsen Jamali wrote: > > Hi guys, > > After searching the web about how to deploy a war file on Tomcat. > > The simplest way is to just copy the wa

RE: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-23 Thread Martin Gainty
Jaikit You can ask Catalina to check the IP address, or host name, on every incoming request directed to the surrounding elements Engine, Host, or Context element. The remote address or name will be checked against a configured list of "allow" and/or "deny" filters, which are de

Re: AuthenticatorBase setChangeSessionIdOnAuthentication without cookies

2012-09-23 Thread Mark Thomas
On 23/09/2012 10:46, Brian Burch wrote: > With reference to: > > https://issues.apache.org/bugzilla/show_bug.cgi?id=53584 > > I reproduced the problem using the sample war on a back-level svn > version of the trunk, then confirmed the problem was fixed on a later > level. > > I have been develop

AuthenticatorBase setChangeSessionIdOnAuthentication without cookies

2012-09-23 Thread Brian Burch
With reference to: https://issues.apache.org/bugzilla/show_bug.cgi?id=53584 I reproduced the problem using the sample war on a back-level svn version of the trunk, then confirmed the problem was fixed on a later level. I have been developing a new unit test case in org.apache.catalina.authen