Re: JDBCRealm driver location 9.0.24

2021-08-01 Thread passignat
Thanks a lot, it works great. Driver is loaded from catalina_base now. -Original Message- From: Christopher Schultz Reply-To: Tomcat Users List To: users@tomcat.apache.org Subject: Re: JDBCRealm driver location 9.0.24 Date: Sun, 1 Aug 2021 18:08:16 -0400 Stephane, On 8/1/21 11:17

Re: JDBCRealm driver location 9.0.24

2021-08-01 Thread Christopher Schultz
Stephane, On 8/1/21 11:17, Stephane wrote: I'm trying to distinguish catalina_home from catalina_base and I use a JDBCRealm and soon will probably use other realms. Don't use JDBCRealm. Instead, use DataSourceRealm. It's a long story, but DataSourceRealm is what you want for

JDBCRealm driver location 9.0.24

2021-08-01 Thread Stephane
Hello, I'm trying to distinguish catalina_home from catalina_base and I use a JDBCRealm and soon will probably use other realms. I read the documentation, mentioning JDBC driver needs to be in catalina_home/lib. I don't understand why as catalina.properties specify common

Re: Tomcat JDBCRealm using DIGEST authentication not producing the expected HASH using a SALT

2020-07-02 Thread Hugh Roberts
_251 > > > > We are trying to use Tomcat JDBCRealm to access user credentials stored > in > > Oracle DB. The user password is hashed with a SALT and stored in a table. > > > > *ISSUE:* We can authenticate using the BASIC auth-method while passing > the > >

Re: Tomcat JDBCRealm using DIGEST authentication not producing the expected HASH using a SALT

2020-07-02 Thread Mark Thomas
On 02/07/2020 17:38, Hugh Roberts wrote: > Tomcat 9.0.36 > JDK 1.8.0_251 > > We are trying to use Tomcat JDBCRealm to access user credentials stored in > Oracle DB. The user password is hashed with a SALT and stored in a table. > > *ISSUE:* We can authenticate using the BA

Tomcat JDBCRealm using DIGEST authentication not producing the expected HASH using a SALT

2020-07-02 Thread Hugh Roberts
Tomcat 9.0.36 JDK 1.8.0_251 We are trying to use Tomcat JDBCRealm to access user credentials stored in Oracle DB. The user password is hashed with a SALT and stored in a table. *ISSUE:* We can authenticate using the BASIC auth-method while passing the hashed string of the password but the DIGEST

RE: JDBCRealm - Works OK but logs errors

2014-11-19 Thread vince.webb
I ignored the errors logged by JDBCRealm and proceeded to create my custom Realm. I extended JDBCRealm overriding the authenticate method and using inherited JDBCRealm methods for authorization. This new Realm works OK but JDBCRealm code was logging errors that look related to the ones logged

Re: JDBCRealm - Works OK but logs errors

2014-11-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Vince, On 11/10/14 11:02 AM, vince.w...@thomsonreuters.com wrote: > I have Tomcat 8.0.9 running under NetBeans. An application using > JDBCRealm is authenticating and authorising users OK but Tomcat is > logging errors. I don't be

JDBCRealm - Works OK but logs errors

2014-11-10 Thread vince.webb
Hello I have Tomcat 8.0.9 running under NetBeans. An application using JDBCRealm is authenticating and authorising users OK but Tomcat is logging errors. Errors get logged on Tomcat startup and another each time a user logs in. Numerous occurrences of this Exception: 10-Nov-2014 15:18:48.108

RE: Configured JDBCRealm

2014-09-03 Thread Dalecki, Janusz
-Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Thursday, 4 September 2014 12:57 AM To: Tomcat Users List Subject: Re: Configured JDBCRealm -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Janusz, On 9/2/14, 10:31 PM, Dalecki, Janusz wrote: >

RE: Configured JDBCRealm

2014-09-03 Thread Dalecki, Janusz
-Original Message- From: Daniel Mikusa [mailto:dmik...@pivotal.io] Sent: Wednesday, 3 September 2014 10:03 PM To: Tomcat Users List Subject: Re: Configured JDBCRealm On Tue, Sep 2, 2014 at 9:59 PM, Dalecki, Janusz wrote: > > > -Original Message- > From: D

Re: Configured JDBCRealm

2014-09-03 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Janusz, On 9/2/14, 10:31 PM, Dalecki, Janusz wrote: > I have just started reading on DataSource realm. But I think I am > facing the same problem as with JDBCRealm: 1) How can I get > hold of an instance of this DataSourceRealm obje

Re: Configured JDBCRealm

2014-09-03 Thread Daniel Mikusa
On Tue, Sep 2, 2014 at 9:59 PM, Dalecki, Janusz wrote: > > > -Original Message- > From: Daniel Mikusa [mailto:dmik...@pivotal.io] > Sent: Tuesday, 2 September 2014 10:04 PM > To: Tomcat Users List > Subject: Re: Configured JDBCRealm > > On Tue, Sep 2, 2014

RE: Configured JDBCRealm

2014-09-02 Thread Felix Schumacher
On 3. September 2014 04:31:45 MESZ, "Dalecki, Janusz" wrote: > > >-Original Message- >From: Mark Eggers [mailto:its_toas...@yahoo.com.INVALID] >Sent: Wednesday, 3 September 2014 1:21 AM >To: Tomcat Users List >Subject: Re: Configured JDBCRealm &

RE: Configured JDBCRealm

2014-09-02 Thread Dalecki, Janusz
-Original Message- From: Mark Eggers [mailto:its_toas...@yahoo.com.INVALID] Sent: Wednesday, 3 September 2014 1:21 AM To: Tomcat Users List Subject: Re: Configured JDBCRealm -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 9/2/2014 5:04 AM, Daniel Mikusa wrote: > On Tue, Sep 2, 2014

RE: Configured JDBCRealm

2014-09-02 Thread Dalecki, Janusz
-Original Message- From: Daniel Mikusa [mailto:dmik...@pivotal.io] Sent: Tuesday, 2 September 2014 10:04 PM To: Tomcat Users List Subject: Re: Configured JDBCRealm On Tue, Sep 2, 2014 at 7:00 AM, Dalecki, Janusz wrote: > Hi, > I have configured JDBCRealm Tomcat with the fol

Re: Configured JDBCRealm

2014-09-02 Thread Mark Eggers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 9/2/2014 5:04 AM, Daniel Mikusa wrote: > On Tue, Sep 2, 2014 at 7:00 AM, Dalecki, Janusz > wrote: > >> Hi, I have configured JDBCRealm Tomcat with the following: >> >> >> >> > driverName

Re: Configured JDBCRealm

2014-09-02 Thread Daniel Mikusa
On Tue, Sep 2, 2014 at 7:00 AM, Dalecki, Janusz wrote: > Hi, > I have configured JDBCRealm Tomcat with the following: > > > > driverName="org.postgresql.Driver" > connectionURL="jdbc:postgresql://localhost:5432/df_Scheduler?user=postgre

Configured JDBCRealm

2014-09-02 Thread Dalecki, Janusz
Hi, I have configured JDBCRealm Tomcat with the following: I have a few questions: 1) How can I get hold of this realm object within my Java app? 2) Even if I get the instance of the JDBCRealm - how do I get the list of all roles available? Regards, Janusz

Re: JDBCRealm conection timeout failure on getPassword

2012-10-08 Thread Aladin Dajani
gt;>> Thank you all for your help. I now have DataSourceRealm based >>>> authentication up and running with my connection pool. >>>> >>>> One thing I want to mention is that I was unable to make teh scenarios >>>> described in the wiki work until I dupl

Re: JDBCRealm conection timeout failure on getPassword

2012-10-07 Thread Mark Eggers
urceRealm open SEVERE: Exception performing authentication javax.naming.**NameNotFoundException: Name jdbc is not bound in this Context Here is my configuration. context.xml is unchanged from previous setup (works well for pooled database access within the app) {catalina-base}\conf\context.**xml:

Re: JDBCRealm conection timeout failure on getPassword

2012-10-07 Thread Aladin Dajani
t;>> name="jdbc/MyAppDB" > >>>> auth="Container" > >>>> driverClassName="com.mysql.**jdbc.Driver" > >>>> logAbandoned="true" > >>>> maxActive="100" > >>>> maxIdle="30&qu

Re: JDBCRealm conection timeout failure on getPassword

2012-10-07 Thread Pid
> auth="Container" >>>> driverClassName="com.mysql.**jdbc.Driver" >>>> logAbandoned="true" >>>> maxActive="100" >>>> maxIdle="30" >>>> maxWait="1" >>>> password="pass

Re: JDBCRealm conection timeout failure on getPassword

2012-10-07 Thread Aladin Dajani
>>> maxWait="1" >>> password="password" >>> username="user" >>> removeAbandoned="true" >>> removeAbandonedTimeout="60" >>> type="javax.sql.DataSource" >>> url="

Re: JDBCRealm conection timeout failure on getPassword

2012-10-07 Thread Mark Eggers
javax.naming.NameNotFoundException: Name jdbc is not bound in this Context Here is my configuration. context.xml is unchanged from previous setup (works well for pooled database access within the app) {catalina-base}\conf\context.xml: Server.xml replaces the JDBCRealm with the DataSourceRealm

Re: JDBCRealm conection timeout failure on getPassword

2012-10-07 Thread Pid *
pDB" > auth="Container" > driverClassName="com.mysql.jdbc.Driver" > logAbandoned="true" > maxActive="100" > maxIdle="30" > maxWait="1" > password="password" > username="user" > removeAbandoned="true

Re: JDBCRealm conection timeout failure on getPassword

2012-10-07 Thread Aladin Dajani
configuration. context.xml is unchanged from previous setup (works well for pooled database access within the app) {catalina-base}\conf\context.xml: Server.xml replaces the JDBCRealm with the DataSourceRealm as below {catalina-base}\conf\server.xml: Have I missed a

Re: JDBCRealm conection timeout failure on getPassword

2012-10-07 Thread Aladin Dajani
Thanks Felix, This does look like what I need. On Sun, Oct 7, 2012 at 9:36 AM, Felix Schumacher < felix.schumac...@internetallee.de> wrote: > > > Aladin Dajani schrieb: > > >Hello List, > > > >My application is configured for JDBCRealm authentication uses a

Re: JDBCRealm conection timeout failure on getPassword

2012-10-07 Thread Felix Schumacher
Aladin Dajani schrieb: >Hello List, > >My application is configured for JDBCRealm authentication uses a MySQL >database. >For my own use inside the application, I have setup a connection pool >to >access the database, However, the configuration of JDBCRealm in >serve

JDBCRealm conection timeout failure on getPassword

2012-10-07 Thread Aladin Dajani
Hello List, My application is configured for JDBCRealm authentication uses a MySQL database. For my own use inside the application, I have setup a connection pool to access the database, However, the configuration of JDBCRealm in server.xml uses astand-alone connection. Since MySQL times-out

Re: Web app using JDBCRealm runs on Tomcat 5.5.20 but will not run on Tomcat 6.0.26 ...

2010-06-06 Thread Frank Burns
Fully understood -- and very clearly explained. Again, thanks Chuck. Cheers, Frank On Sun, Jun 6, 2010 at 3:25 PM, Caldarale, Charles R < chuck.caldar...@unisys.com> wrote: > > From: Frank Burns [mailto:francisbu...@gmail.com] > > Subject: Re: Web app using JDBCRealm runs on

RE: Web app using JDBCRealm runs on Tomcat 5.5.20 but will not run on Tomcat 6.0.26 ...

2010-06-06 Thread Caldarale, Charles R
> From: Frank Burns [mailto:francisbu...@gmail.com] > Subject: Re: Web app using JDBCRealm runs on Tomcat 5.5.20 but will not > run on Tomcat 6.0.26 ... > > didn't realise that specifying the context in the server.xml > was poor practice and that if you did so then

Re: Web app using JDBCRealm runs on Tomcat 5.5.20 but will not run on Tomcat 6.0.26 ...

2010-06-05 Thread Frank Burns
s [mailto:francisbu...@gmail.com] > > Subject: Web app using JDBCRealm runs on Tomcat 5.5.20 but will not run > > on Tomcat 6.0.26 ... > > > > the context that I use in the server.xml of each Tomcat > > Let's get the element straightened out first. You should not

RE: Web app using JDBCRealm runs on Tomcat 5.5.20 but will not run on Tomcat 6.0.26 ...

2010-06-05 Thread Caldarale, Charles R
> From: Frank Burns [mailto:francisbu...@gmail.com] > Subject: Web app using JDBCRealm runs on Tomcat 5.5.20 but will not run > on Tomcat 6.0.26 ... > > the context that I use in the server.xml of each Tomcat Let's get the element straightened out first. You should not b

Web app using JDBCRealm runs on Tomcat 5.5.20 but will not run on Tomcat 6.0.26 ...

2010-06-05 Thread Frank Burns
I have a web app that successfully runs on Tomcat 5.5.20 but will not run on Tomcat 6.0.26. Can someone please help me work out why it won't run? It's on a Windows XP, SP2 machine. The web app uses JDBCRealm to access a mysql database. The apps in each Tomcat version are iden

Re: Configured JDBCRealm, but is not used

2010-05-13 Thread Maximilian Krickl
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 You need to use localDataSource="true" so the Realm looks locally for the DataSource. Great, that is even better (and it also works) :-) Thanks again. MaxX -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (Darwin) iEYEARECAAYFAkvsZgwACgkQ/6VV

Re: Configured JDBCRealm, but is not used

2010-05-13 Thread Maximilian Krickl
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm not positive about this, but I think your declaration will need to be in server.xml in order to be used for a (even though the is specific to just one ). The authentication is done by Tomcat, not the webapp, so it's Tomcat that has to

RE: Configured JDBCRealm, but is not used

2010-05-13 Thread Caldarale, Charles R
> From: Mark Thomas [mailto:ma...@apache.org] > Subject: Re: Configured JDBCRealm, but is not used > > No, you can have the resource at the context level. > > > The authentication is done by Tomcat, not the webapp, so > > it's Tomcat that has to have the database

Re: Configured JDBCRealm, but is not used

2010-05-13 Thread Mark Thomas
On 13/05/2010 21:29, Caldarale, Charles R wrote: From: Maximilian Krickl [mailto:maxkri...@gmx.de] Subject: Re: Configured JDBCRealm, but is not used when I try to login via the login form of tomcat I get this: 13.05.2010 21:59:07 org.apache.catalina.realm.DataSourceRealm open SCHWERWIEGEND

RE: Configured JDBCRealm, but is not used

2010-05-13 Thread Caldarale, Charles R
> From: Maximilian Krickl [mailto:maxkri...@gmx.de] > Subject: Re: Configured JDBCRealm, but is not used > > when I try to login via the login form of tomcat I get this: > 13.05.2010 21:59:07 org.apache.catalina.realm.DataSourceRealm open > SCHWERWIEGEND: Exception perform

Re: Configured JDBCRealm, but is not used

2010-05-13 Thread Maximilian Krickl
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi everybody, Ew. Don't use a JDBCRealm (it's synchronised etc), use a DataSourceRealm with an appropriately configured DataSource. so I changed my META-INF/context.xml to: - --- - --- and added some lines to t

Re: Configured JDBCRealm, but is not used

2010-05-09 Thread Pid
connectionPassword="password" >>> connectionURL="jdbc:postgresql:game" >>> driverName="org.postgresql.Driver" >>> roleNameCol="role" userCredCol="password" userNameCol="loginname" >>

RE: Configured JDBCRealm, but is not used

2010-05-09 Thread Martin Gainty
Col="password" userNameCol="loginname" > > userRoleTable="player" userTable="player" /> > > Ew. Don't use a JDBCRealm (it's synchronised etc), use a > DataSourceRealm with an appropriately configured DataSource. use D

RE: Configured JDBCRealm, but is not used

2010-05-08 Thread Caldarale, Charles R
> From: Pid [mailto:p...@pidster.com] > Subject: Re: Configured JDBCRealm, but is not used > > > > > The above is wrong. Remove docBase and path, they are illegal in > context.xml. Also get rid of the debug attribute - it hasn't been used in years. - Chuck T

Re: Configured JDBCRealm, but is not used

2010-05-08 Thread Pid
connectionURL="jdbc:postgresql:game" > driverName="org.postgresql.Driver" > roleNameCol="role" userCredCol="password" userNameCol="loginname" > userRoleTable="player" userTable="player" /> Ew. Don't use a JDBCRe

Configured JDBCRealm, but is not used

2010-05-08 Thread Maximilian Krickl
Hello, I installed Tomcat 6.0.26 and PostgreSQL 8.3 on my PC (win) and a server (ubuntu). On both's machines the databases are similar. I use Eclipse 3.5 Java EE (Dynamic Web Project). My project uses "Form based authentication". The META-INF folder contains a context.xml: --- c

RE: Tomcat 5 JDBCRealm Configuration

2009-07-12 Thread Geofrey Rainey
...@unisys.com] Sent: Monday, 13 July 2009 6:56 a.m. To: Tomcat Users List Subject: RE: Tomcat 5 JDBCRealm Configuration > From: d...@maquib.com [mailto:d...@maquib.com] > Subject: Tomcat 5 JDBCRealm Configuration > > I'm new here, and i have a client that is running tomcat 5 &g

RE: Tomcat 5 JDBCRealm Configuration

2009-07-12 Thread Caldarale, Charles R
> From: d...@maquib.com [mailto:d...@maquib.com] > Subject: Tomcat 5 JDBCRealm Configuration > > I'm new here, and i have a client that is running tomcat 5 > on his server Be specific; what exact level of Tomcat 5? If you mean 5.0.x, it's no longer supported, but you

Tomcat 5 JDBCRealm Configuration

2009-07-12 Thread dean
Hi there, I'm new here, and i have a client that is running tomcat 5 on his server and i cannot find any tutorials on setting up JDBCRealms for users. And as my application uses them are there any suggestions on how i can set it up as the web interface doesn't have anything on this. I have develope

RE: JDBCRealm, Tomcat and MySQL

2009-05-03 Thread Caldarale, Charles R
> From: ubk [mailto:m.urbanow...@o2.pl] > Subject: JDBCRealm, Tomcat and MySQL > > > type="javax.sql.DataSource"/> > You say you're using Tomcat 6.0.18, but the config you've specified is for some ancient version. Rea

Re: JDBCRealm, Tomcat and MySQL

2009-05-03 Thread ubk
l: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > > > Apache Tomcat 6.0.18 I'm sure that db user and password are correct. -- View this message in context: http://www.nabble.com/JDBCRealm%2C-Tomcat-and-MySQL-tp23349009p2335

Re: JDBCRealm, Tomcat and MySQL

2009-05-03 Thread Pid
ubk wrote: > Hi all > I have a problem with authorization based on JDBCRealm. When I'm trying to > get access to some html page which is store in protected directory all that > I can see is just login-error.jsp page. I'm using login and password from my > databa

JDBCRealm, Tomcat and MySQL

2009-05-02 Thread ubk
Hi all I have a problem with authorization based on JDBCRealm. When I'm trying to get access to some html page which is store in protected directory all that I can see is just login-error.jsp page. I'm using login and password from my database. My

Re: JDBCRealm authentication

2009-02-23 Thread Alexander Soudakov
everybody, I have a question about JDBCRealm authentication in Tomcat 5.5. I'm trying to use mysql database for authentication and I was wondering if it is possible to use just one single table with usernames, passwords and role names instead of two with usernames, passwords and with userna

Re: JDBCRealm authentication

2009-02-23 Thread Troy Davis
config values. HTH, Troy On Feb 23, 2009, at 9:50 PM, Alexander Soudakov wrote: Hi everybody, I have a question about JDBCRealm authentication in Tomcat 5.5. I'm trying to use mysql database for authentication and I was wondering if it is possible to use just one single table wi

JDBCRealm authentication

2009-02-23 Thread Alexander Soudakov
Hi everybody, I have a question about JDBCRealm authentication in Tomcat 5.5. I'm trying to use mysql database for authentication and I was wondering if it is possible to use just one single table with usernames, passwords and role names instead of two with usernames, passwords and

Re: Problems with logout with Tomcat JDBCRealm

2008-07-01 Thread Thomas Haines
Hi André I'm using Tomcat JDBCRealm to authentication and authorization in my app. Login works fine, and when the user press the logout button(calls the session.invalidate()), he cannot login again. You could try adding: session.removeAttribute("User"); before you invalid

Problems with logout with Tomcat JDBCRealm

2008-06-25 Thread André Silva
Hi All =) This is my first message here, sorry for the poor english. I'm using Tomcat JDBCRealm to authentication and authorization in my app. Login works fine, and when the user press the logout button(calls the session.invalidate()), he cannot login again. When the user tries to login

Re: Setting up JDBCRealm for form authentication

2008-05-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Carol, Carol Cheung wrote: | http://hostname:port/appname/jsp/welcome.jsp | | I've secured welcome.jsp with /jsp/welcome.jsp So, you request /jsp/welcome.jsp and are redirected to /jsp/login.jsp, then you enter a valid username and password and you

Re: Setting up JDBCRealm for form authentication

2008-05-23 Thread Carol Cheung
On 23/05/2008 15:53, Christopher Schultz wrote the following: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Carol, Carol Cheung wrote: | Thanks Christopher Schultz for pointing out my error: the url pattern | should be /jsp/welcome.jsp. | | Now, I'm able to see login.jsp when requesting welcom

Re: Setting up JDBCRealm for form authentication

2008-05-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Carol, Carol Cheung wrote: | Thanks Christopher Schultz for pointing out my error: the url pattern | should be /jsp/welcome.jsp. | | Now, I'm able to see login.jsp when requesting welcome.jsp. | If I enter an incorrect login/password combination, I g

Re: Setting up JDBCRealm for form authentication

2008-05-23 Thread Carol Cheung
On 20/05/2008 15:31, Carol Cheung wrote the following: Hi, Here's a part of my web.xml: user user Secure User Pages SecureUserPages /index.jsp /welcome.jsp user user FORM /login.jsp /loginEr

Re: Setting up JDBCRealm for form authentication

2008-05-20 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Carol, Carol Cheung wrote: | /welcome.jsp [snip] | The URL is | http://hostname:/appname/jsp/welcome.jsp Your URLs are mismatched. You are protecting "/welcome.jsp", but then requesting "/jsp/welcome.jsp". You'll want to either move the

Re: Setting up JDBCRealm for form authentication

2008-05-20 Thread Carol Cheung
://tomcat.apache.org/tomcat-5.5-doc/realm-howto.html for JDBCRealm For the application, I have followed the instructions at http://www.onjava.com/pub/a/onjava/2001/08/06/webform.html The problem I am experiencing is that when I try to access the page I have specified in web.xml as secure, I get to that page

Re: Setting up JDBCRealm for form authentication

2008-05-20 Thread Mark Thomas
Carol Cheung wrote: Hi, I am very new to the aforementioned subject. As hinted in subject, I am trying to set up a web application using form authentication. I have set up server.xml according to the steps specified at http://tomcat.apache.org/tomcat-5.5-doc/realm-howto.html for JDBCRealm

Setting up JDBCRealm for form authentication

2008-05-20 Thread Carol Cheung
Hi, I am very new to the aforementioned subject. As hinted in subject, I am trying to set up a web application using form authentication. I have set up server.xml according to the steps specified at http://tomcat.apache.org/tomcat-5.5-doc/realm-howto.html for JDBCRealm For the application, I

custom JDBCRealm in Tomcat 5.5

2008-04-24 Thread Ivan Cheung
Hi, I have trying to do some custom authentication I have written myRealm to extend JDBCRealm modify server.xml

Re: Manager app authentication not working with JDBCRealm

2008-03-22 Thread Mark Leone
Caldarale, Charles R wrote: Since there doesn't seem to be any means of the 401.jsp to interact with the declared to determine or specify the other necessary attributes for a digest 401 response (e.g., the nonce), it looks like it's impossible at this time to use a custom 401 handler with cont

RE: Manager app authentication not working with JDBCRealm

2008-03-21 Thread Caldarale, Charles R
> From: Mark Leone [mailto:[EMAIL PROTECTED] > Subject: Re: Manager app authentication not working with JDBCRealm > > So it seems to me that it is not correct for the realm name > to be overriden by the error page. Actually, I think it is. The reason the is cosmetic in the case

Re: Manager app authentication not working with JDBCRealm

2008-03-21 Thread Mark Leone
he digested password, which of course includes the eralm name in the calculation. So I commented out the element, the credentials window now displays "JDBCRealm" as the realm name, and the authentication was successful. So it seems to me that it is not correct for the realm name to be ov

Re: RE: Manager app authentication not working with JDBCRealm

2008-03-21 Thread Mark Leone
>> >> But why does my custom app display "JDBCRealm" in the credentials >> prompt? > >Because the 401.jsp file in the manager webapp overrides the default >dialog box; since your custom webapp has no such error page, the > is used. Note that is purely

RE: Manager app authentication not working with JDBCRealm

2008-03-21 Thread Caldarale, Charles R
> From: Mark Leone [mailto:[EMAIL PROTECTED] > Subject: Re: Manager app authentication not working with JDBCRealm > > But why does my custom app display "JDBCRealm" in the credentials > prompt? Because the 401.jsp file in the manager webapp overrides the default dial

Re: Manager app authentication not working with JDBCRealm

2008-03-20 Thread Mark Leone
ut why does my custom app display "JDBCRealm" in the credentials prompt? Something is making these two apps behave differently wrt authentication, and it seems that the fact that they display different authentication prompts could be a clue. Problem is, even with this clue, I don't

RE: Manager app authentication not working with JDBCRealm

2008-03-20 Thread Caldarale, Charles R
> From: Mark Leone [mailto:[EMAIL PROTECTED] > Subject: Re: Manager app authentication not working with JDBCRealm > > Implementing a JAASRealm sounds easy enough I wasn't suggesting that you convert to a JAASRealm, but just providing evidence that the manager webapp i

Re: Manager app authentication not working with JDBCRealm

2008-03-20 Thread Mark Leone
6.0.16 in your production environment, I'm not 100% sure it will work for me. AFAIK, JDBCRealm is working for 6.0.16 as well, and I seem to have a manager-specific problem that prevents it from working in my environment. I just tried manager with Tomcat 5.5 (on a different system than my 6.0 Tom

RE: Manager app authentication not working with JDBCRealm

2008-03-20 Thread Caldarale, Charles R
> From: Caldarale, Charles R > Subject: RE: Manager app authentication not working with JDBCRealm > > Note that we left the for > org.apache.catalina.UserDatabase alone. Also, we did not change the under in the manager web.xml file, although I don't think that wi

RE: Manager app authentication not working with JDBCRealm

2008-03-20 Thread Caldarale, Charles R
> From: Mark Leone [mailto:[EMAIL PROTECTED] > Subject: Re: Manager app authentication not working with JDBCRealm > > I wonder if the use of the UserDatabase resource is > hard-wired into the manager app somehow. It's not; we use a JAASRealm for Tomcat 6.0.16 production,

Re: Manager app authentication not working with JDBCRealm

2008-03-20 Thread Mark Leone
O.k., I think that will break the world. As far as I know, you may have only one inside a given container (, , ); a at a lower level overrides any at a higher one. If you want all apps to use your JDBCRealm, you have to remove (or comment out) the default one for the . I commented out

Re: Manager app authentication not working with JDBCRealm

2008-03-20 Thread Mark Thomas
Mark Leone wrote: Tomcat 6 still has the html page for the admin app that says it can be downloaded if desired, so I assumed it was still supported for 6.0. This should be fixed (ie removed) by the next release. Mark - To st

RE: Manager app authentication not working with JDBCRealm

2008-03-19 Thread Caldarale, Charles R
> From: Mark Leone [mailto:[EMAIL PROTECTED] > Subject: Re: Manager app authentication not working with JDBCRealm > > 2. I added to server.xml the JDBCRealm descriptor that I > showed earlier in the thread. I made no other changes. O.k., I think that will break the world. A

Re: Manager app authentication not working with JDBCRealm

2008-03-19 Thread Mark Leone
tic approach, I started from scratch. I de-installed Tomcat and deleted all its files. Here's how it went. 1. I re-installed 6.0.16, specifying a user name with manager role for tomcat-users.xml. I was able to access manager using these credentials. 2. I added to server.xml the JDBCRealm desc

RE: Manager app authentication not working with JDBCRealm

2008-03-19 Thread Caldarale, Charles R
> From: Mark Leone [mailto:[EMAIL PROTECTED] > Subject: Re: Manager app authentication not working with JDBCRealm > > Mar 19, 2008 10:21:23 PM org.apache.catalina.startup.HostConfig > checkResources > INFO: Undeploying context [/admin] There is no admin webapp for Tomcat 6

Re: Manager app authentication not working with JDBCRealm

2008-03-19 Thread Mark Leone
verinfo /status/* /roles /resources manager DIGEST JDBCRealm The role that is required to log in to the Manager Application manager And here's the server.xml excerpt (which I should have pointed out is inside the server/service/engine

RE: Manager app authentication not working with JDBCRealm

2008-03-19 Thread Caldarale, Charles R
> From: Mark Leone [mailto:[EMAIL PROTECTED] > Subject: Re: Manager app authentication not working with JDBCRealm > > I'm using Tomcat 6.0.16. I have my JDBC Connector jar > file in %catalina_home%\lib O.k., that looks good. Why do your posted XML fragments have asterisks

Re: Manager app authentication not working with JDBCRealm

2008-03-19 Thread Mark Leone
I wonder how many times we have to remind people to provide the Tomcat level they're using. Besides that rather critical piece of information, also tell us where you put your driver classes or jar for accessing the authentication database. - Chuck Sorry about that. I'm using Tomcat 6.0.16.

RE: Manager app authentication not working with JDBCRealm

2008-03-19 Thread Caldarale, Charles R
> From: Mark Leone [mailto:[EMAIL PROTECTED] > Subject: Manager app authentication not working with JDBCRealm > > I can't get the manager app working with authentication using > JDBCRealm, even though I've configured it identically to an app > I developed that uses

Manager app authentication not working with JDBCRealm

2008-03-19 Thread Mark Leone
I can't get the manager app working with authentication using JDBCRealm, even though I've configured it identically to an app I developed that uses the same JDBCRealm instance successfully. In both cases, the app requires a user with role "manager", and the same authenticat

Re: JDBCRealm + Expired Passwords

2007-08-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Stephen, Stephen More wrote: > Both of these would require a Filter that checks for the existence of > the role "expiredPassword" and redirect as needed. Yes. That's why I did it myself all in a single filter (including loading the user's state, rath

Re: JDBCRealm + Expired Passwords

2007-08-23 Thread Peter Stavrinides
vided by the container). 3. Checks to see what the user's "status" is. If the user is in the "must change password" state, I send them to the "change password" screen. Using the default tomcat realms I see 2 possibilities: 1. use the JDBCRealm and create a

Re: JDBCRealm + Expired Passwords

2007-08-22 Thread Stephen More
as opposed to the basic authentication provided by the container). > 3. Checks to see what the user's "status" is. >If the user is in the "must change password" state, I send them >to the "change password" screen. Using the default tomcat realms I s

Re: JDBCRealm + Expired Passwords

2007-08-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Stephen, Stephen More wrote: > On 8/21/07, Christopher Schultz <[EMAIL PROTECTED]> wrote: >> Stephen More wrote: >>> Has anyone written or know of a JDBCRealm that supports an expired password >>> ? >> Do

Re: JDBCRealm + Expired Passwords

2007-08-22 Thread Peter Stavrinides
-doc/realm-howto.html#JDBCRealm And: http://java.sun.com/j2se/1.4.2/docs/guide/security/jaas/JAASLMDevGuide.html For authentication you could duplicate the table structure in the JDBCRealm example, but add columns or another table to store a timestamp for when the user last changed/created their

Re: JDBCRealm + Expired Passwords

2007-08-22 Thread Stephen More
In looking at the docs: http://tomcat.apache.org/tomcat-5.5-doc/config/realm.html there is no Attribute for "userCredExpireCol". How do I configure the JDBCRealm to look at an expiration column ? -Steve On 8/22/07, Peter Stavrinides <[EMAIL PROTECTED]> wrote: > I also didn&#

Re: JDBCRealm + Expired Passwords

2007-08-22 Thread Peter Stavrinides
I also didn't understand exactly what you mean, but 'JDBCRealm'... implies using a database, so the simple way is to redirect and use a web form to change it, which is easy enough. If you don't want to use a web form then its an entirely different story, I assume some

Re: JDBCRealm + Expired Passwords

2007-08-21 Thread Stephen More
On 8/21/07, Christopher Schultz <[EMAIL PROTECTED]> wrote: > Stephen More wrote: > > Has anyone written or know of a JDBCRealm that supports an expired password > > ? > > Do you mean that you want expired-password-users to be forced to change > their password be

Re: JDBCRealm + Expired Passwords

2007-08-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Stephen, Stephen More wrote: > Has anyone written or know of a JDBCRealm that supports an expired password ? Can you phrase that in a different way? I wouldn't want my JDBCRealm to allow expired passwords to be used. Do you mean that

JDBCRealm + Expired Passwords

2007-08-21 Thread Stephen More
Has anyone written or know of a JDBCRealm that supports an expired password ? -Thanks Steve More - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail

RE: Configure customized deny page for tomcat JDBCRealm authorization

2007-07-10 Thread Propes, Barry L
org Subject: Configure customized deny page for tomcat JDBCRealm authorization Hi, Tow users, user1 and user2, are setup for tomcat. User1 can visit page1 and page2, but user2 can see only page2. Using the form based authentication and authorization, how to configure the denied page? It is not

Re: Configure customized deny page for tomcat JDBCRealm authorization

2007-07-09 Thread Lyallex
ny-page-for-tomcat-JDBCRealm-authorization-tf4042164.html#a11483101 Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PRO

Configure customized deny page for tomcat JDBCRealm authorization

2007-07-07 Thread EricKnight
://www.nabble.com/Configure-customized-deny-page-for-tomcat-JDBCRealm-authorization-tf4042164.html#a11483101 Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: users@tomcat.apache.org To

  1   2   >