Re: CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Mark Thomas
On 27/08/2010 18:33, Michael Dockery wrote: > Our usernames are not named > exactly the same >as the x509 cert 'subject' attr. (or any other attr) > > I was hoping i could do some mapping > to match a client cert (attr) >to an existing tomcat username > > ...perhaps > similar to t

Re: CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Michael Dockery
rg/display/CASUM/X.509+Certificates From: "Caldarale, Charles R" To: Tomcat Users List Sent: Fri, August 27, 2010 1:12:24 PM Subject: RE: CLIENT-AUTH x509 attribute mapping to user name > From: Michael Dockery [mailto:dockeryjava...@yahoo.com] >

RE: CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Caldarale, Charles R
> From: Michael Dockery [mailto:dockeryjava...@yahoo.com] > Subject: CLIENT-AUTH x509 attribute mapping to user name Can anyone tell me what class.method  > Can anyone tell me what Tomcat version you're using? > which I would need to override >  to map a client x509 cert

CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Michael Dockery
Can anyone tell me what class.method   which I would need to override   to map a client x509 cert subject/dn attribute     to a valid tomcat username (in memory realm or otherwise)   I assume the authenticator method    or perhaps the login method...

Re: CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Pid
On 27/08/2010 15:16, Michael Dockery wrote: > Can anyone tell me what class/method i would need to override > to make a client x509 cert subject/dn attribute > to a valid tomcat username (in memory realm or otherwise) > > I assume the authenticator method > or perhaps the login method... Ple

CLIENT-AUTH x509 attribute mapping to user name

2010-08-27 Thread Michael Dockery
Can anyone tell me what class/method i would need to override  to make a client x509 cert subject/dn attribute   to a valid tomcat username (in memory realm or otherwise) I assume the authenticator method  or perhaps the login method...