Tomcat embedded with Apache Solr

2018-10-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I've posted a question to the Solr mailing list[1] about why Jetty is being used instead of Tomcat, and it seems that it's just "always the way it's been" for the most part. These seems to be some interest in moving from their existing model (

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-13 Thread Tony Esposito
Hello André, It's routed through a server... A co-worker noticed a Tomcat valve that might do the trick... https://github.com/lokechenlin/tomcat-auto-login-valve Your thoughts? Tony -Original Message- From: André Warnier (tomcat) [mailto:a...@ice-sa.com] Sent: Saturday, October 13, 2

Re: Tomcat 8 and authenticating Basic Auth users

2018-10-13 Thread tomcat
On 13.10.2018 18:54, Tony Esposito wrote: Hello André, Thank you for taking the time to put together this excellent explanation. I do not have control over the server that is passing me the Basic Auth header, unfortunately. Ok, so to make things clearer : when Tomcat receives a request for t

RE: Tomcat 8 and authenticating Basic Auth users

2018-10-13 Thread Tony Esposito
Hello André, Thank you for taking the time to put together this excellent explanation. I do not have control over the server that is passing me the Basic Auth header, unfortunately. You mentioned "In other words, there is no "trick" to add to stop Tomat trying to authenticate the client. By de

Re: Tomcat 8 and authenticating Basic Auth users

2018-10-13 Thread tomcat
On 13.10.2018 04:56, Tony Esposito wrote: But you still want your application to see this Basic Auth header, because it needs to check the "standard password" in it, right ? (Otherwise, describe precisely what you want). If there is a way to disable Basic Auth (i.e. not compel the user to auth