Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-24 Thread jaikit
One of the platform team's filter was overriding the remote address with actual ip :( I removed their filter and verified. Apologies and thanks everyone for their time. Thanks On 9/24/12 11:58 AM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jaikit, On 9/22/12 6:

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 9/24/12 3:58 AM, André Warnier wrote: > 1) curl http://localhost/something > > Result in log : > > ::1 - - [24/Sep/2012:09:22:51 +0200] "GET /something HTTP/1.1" 404 > 282 "-" "curl/7.21.0 (i486-pc-linux-gnu) libcurl/7.21.0 > OpenSSL/0.9.8

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jaikit, On 9/22/12 6:04 PM, Jaikit Savla wrote: > I have some admin api's which I want to have restricted access I think you mean APIs. "admin api's which" is a possessive even a native English speaker can't figure out. > - such that only if the req

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-24 Thread André Warnier
Jaikit Savla wrote: Hi, You are right it does regrex matching. I wanted to say that it does not do any kind of dnslookup in filter. @configuration: I do not have any particular configuration or firewall set up. I have mentioned below output from tcpdump (listening on loopback interface) and as

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-23 Thread Jaikit Savla
requests from localhost using tomcat RemoteAddrFilter 2012/9/23 Jaikit Savla : > Hello Users, > > I have some admin api's which I want to have restricted access - such that > only if the request originates from localhost - it will execute. > For that I am using tomca

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-23 Thread Konstantin Kolinko
2012/9/23 Jaikit Savla : > Hello Users, > > I have some admin api's which I want to have restricted access - such that > only if the request originates from localhost - it will execute. > For that I am using tomcat's RemoteAddrfilter > > > Remote Address Filter > > org.apache.catalin

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-23 Thread Konstantin Kolinko
> > HTH, > Martin > Martin, what crap of outdated documentation are you citing? 1. RemoteHostValve uses Java regexp implementation, not Jakarta one 2. Comma (,) is not a valid separator between values there in Tomcat 7. > > >> Date: Sat, 22 Sep 2012 23:36:33 -0700 >

RE: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-23 Thread Martin Gainty
Example filter declarations:. e.g ... ... HTH, Martin > Date: Sat, 22 Sep 2012 23:36:33 -0700 > From: jaikit.sa...@yahoo.com > Subject: Re: Authenticate requests from localhost using tomcat > RemoteAddrFilter > To: users@tomcat.apache.org > > I have not yet tri

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-22 Thread Jaikit Savla
: Saturday, September 22, 2012 10:41 PM Subject: Re: Authenticate requests from localhost using tomcat RemoteAddrFilter Jaikit, Am 23.09.2012 00:04, schrieb Jaikit Savla: > Hello Users, > > I have some admin api's which I want to have restricted access - such that > only if the r

Re: Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-22 Thread Ralph Plawetzki
Jaikit, Am 23.09.2012 00:04, schrieb Jaikit Savla: > Hello Users, > > I have some admin api's which I want to have restricted access - such that > only if the request originates from localhost - it will execute. > For that I am using tomcat's RemoteAddrfilter what exactly do you mean with admin

Authenticate requests from localhost using tomcat RemoteAddrFilter

2012-09-22 Thread Jaikit Savla
Hello Users, I have some admin api's which I want to have restricted access - such that only if the request originates from localhost - it will execute. For that I am using tomcat's RemoteAddrfilter       Remote Address Filter       org.apache.catalina.filters.RemoteAddrFilter               al