Re: How to authenticate our webapp against our own relm only

2015-07-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Felix, On 7/21/15 11:13 AM, Felix Schumacher wrote: > > > Am 21. Juli 2015 17:50:43 MESZ, schrieb Arno > : >> Christopher Schultz christopherschultz.net> writes: >>> Accessing a protected resource triggers an authorization check, >>> which also r

Re: How to authenticate our webapp against our own relm only

2015-07-21 Thread Felix Schumacher
Am 21. Juli 2015 17:50:43 MESZ, schrieb Arno : >Christopher Schultz christopherschultz.net> writes: >> Accessing a protected resource triggers an authorization check, which >> also required authentication. Some realms cache authentication >> information while others do not. The authenticator is

Re: How to authenticate our webapp against our own relm only

2015-07-21 Thread Arno
Christopher Schultz christopherschultz.net> writes: > Accessing a protected resource triggers an authorization check, which > also required authentication. Some realms cache authentication > information while others do not. The authenticator is a Valve which > uses the Realm to perform the authent

Re: How to authenticate our webapp against our own relm only

2015-07-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Arno, On 7/21/15 10:05 AM, Arno wrote: > Felix Schumacher internetallee.de> writes: >> I think tomcat will always inject a realm into to host when it >> finds none. > But that realm should not interfere >> with your requests to your webapp. > > Yo

Re: How to authenticate our webapp against our own relm only

2015-07-21 Thread Arno
Mark Eggers yahoo.com.INVALID> writes: > It looks like one of the prior developers wrote a custom Realm. Was > this application written to run on a prior version of Tomcat (Tomcat > 6, for example)? If so, the custom Realm may not work with Tomcat 7. > You would have to look at the javadoc for Th

Re: How to authenticate our webapp against our own relm only

2015-07-21 Thread Arno
Felix Schumacher internetallee.de> writes: > I think tomcat will always inject a realm into to host when it finds none. But that realm should not interfere > with your requests to your webapp. You are right, and I see, that I have misinterpreted my debugger sessions. Our realm contains an additi

Re: How to authenticate our webapp against our own relm only

2015-07-18 Thread Konstantin Kolinko
2015-07-17 20:03 GMT+03:00 Arno Schäfer : > Hi all, > > I am using Tomcat 7.0.54 with java 1.7 and 1.8 on a Windows 8.1 System, > maintaining our webapp with around 1000 JSP pages and I am NOT a web > developer. > > I have inherited this application and all of the previous owners are no > longer

Re: How to authenticate our webapp against our own relm only

2015-07-17 Thread Mark Eggers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Arno, Welcome to Tomcat! First of all, thanks for providing all of the background. Second of all, thanks for doing all of this hard work. Third of all, I'm probably not going to be as much help as many other people here will be, but I'll give it a

Re: How to authenticate our webapp against our own relm only

2015-07-17 Thread Felix Schumacher
Am 17. Juli 2015 19:03:58 MESZ, schrieb "Arno Schäfer" : >Hi all, > >I am using Tomcat 7.0.54 with java 1.7 and 1.8 on a Windows 8.1 System, >maintaining our webapp with around 1000 JSP pages and I am NOT a web >developer. > >I have inherited this application and all of the previous owners are no

How to authenticate our webapp against our own relm only

2015-07-17 Thread Arno Schäfer
Hi all, I am using Tomcat 7.0.54 with java 1.7 and 1.8 on a Windows 8.1 System, maintaining our webapp with around 1000 JSP pages and I am NOT a web developer. I have inherited this application and all of the previous owners are no longer available. So the last 2months I do a lot of reading and