Re: Mod_jk and Security

2005-12-21 Thread Bill Barker
Of course the simplest is to forward all protected content to Tomcat. If you are using Form auth, this is pretty much your only option. It would be a nice feature for (currently vapor-ware) AJP/1.4 however. Otherwise, you have to configure the authorization in both Tomcat and Apache in parall

Re: Mod_jk and Security

2005-12-21 Thread ALEX HYDE
I'm abstracting it to a db with a timeout included. That way both Tomcat and Apache can check for a valid user. --- Dave Morrow <[EMAIL PROTECTED]> wrote: > Hi all. I have a website running under Tomcat 5.5.9 > > I would like to use mod_jk to allow Apache to serve > all static content however,

Mod_jk and Security

2005-12-21 Thread Dave Morrow
Hi all. I have a website running under Tomcat 5.5.9 I would like to use mod_jk to allow Apache to serve all static content however, I cannot figure out how to serve this content only if the user has already logged into the application. This application uses Tomcat sessions. Anyone have experi