Re: Two auth methods for one application

2012-02-09 Thread Remon Sadikni
Hi Jan, The servlet spec doesn't support anything like this. I think what you'll have to do is write your own Authenticator. You can configure your own Authenticator by registering a that is an Authenticator in your webapp's. Just write your own code and register it using. I don't know if th

Re: combination of RemoteAddrValve und basic authentication

2011-10-20 Thread Remon Sadikni
Hi Chris, but "allows" is part of RequestFilterValve. Not in the current trunk. Your code expects the "allows" variable to be of type String[], and no such variable exists in RequestFilterValve. Right: the point of the RequestFilterValve is that you don't have to override the process() meth

Re: combination of RemoteAddrValve und basic authentication

2011-10-19 Thread Remon Sadikni
Hi Chris, If you overrode the process() method (and I'm sure you changed other things, too, since the variable "allows" is not part of RequestFilterValve), then you really aren't getting anything by extending RequestFilterValve. but "allows" is part of RequestFilterValve. I only extended this

Re: combination of RemoteAddrValve und basic authentication

2011-10-19 Thread Remon Sadikni
Hi André, hi Christopher, The use of HTTP BASIC authentication confuses things here because of the credential transfer mechanism (HTTP headers). I suppose you could write a Valve that sniffs the user's IP address and then adds HTTP headers to the request for the "Authentication" header to essent

Re: combination of RemoteAddrValve und basic authentication

2011-09-28 Thread Remon Sadikni
Hi Christopher, You should probably extend ValveBase so you don't have to implement all the silly management methods. http://tomcat.apache.org/tomcat-7.0-doc/api/org/apache/catalina/valves/ValveBase.html This will let you implement only the important method: invoke(). ok, I will try

Re: combination of RemoteAddrValve und basic authentication

2011-09-27 Thread Remon Sadikni
Hi André, hi Christopher, thanks for your answers. The use of HTTP BASIC authentication confuses things here because of the credential transfer mechanism (HTTP headers). I suppose you could write a Valve that sniffs the user's IP address and then adds HTTP headers to the request for the "Authen

combination of RemoteAddrValve und basic authentication

2011-09-26 Thread Remon Sadikni
Dear Tomcat developers and users, I managed to restrict a web application by IP-adress with RemoteAddrValve and to restrict another one by basic authentication. Now I would like to restrict the same web application by both methods: - If the user is inside a specific network (e.g. 134.134.*.*),

Re: Error in Tomcat 6.0 log4j documentation

2011-06-07 Thread Remon Sadikni
Hi Konstantin, hi Mark, all right, thank you. I only looked at the published version, not the one in svn. Regards, Remon On 06/07/2011 05:06 PM, Konstantin Kolinko wrote: 2011/6/7 Mark Thomas: On 07/06/2011 11:52, Remon Sadikni wrote: Hi Mark, for me log4j only works with this additional

Re: Error in Tomcat 6.0 log4j documentation

2011-06-07 Thread Remon Sadikni
Hi Mark, for me log4j only works with this additional line per appender: log4j.appender.CATALINA.layout=org.apache.log4j.PatternLayout Thanks, Remon On 06/06/2011 07:09 PM, Mark Thomas wrote: On 06/06/2011 15:25, Remon Sadikni wrote: Dear Tomcat-Developers and Users, I think there is an

Error in Tomcat 6.0 log4j documentation

2011-06-06 Thread Remon Sadikni
Dear Tomcat-Developers and Users, I think there is an error in the Tomcat 6.0 logging documentation with log4j: http://tomcat.apache.org/tomcat-6.0-doc/logging.html#Using_Log4j For every appender there is a layout missing and in front of conversionPattern there is missing "layout.". So for e