Re: Custom Realm

2014-10-14 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Meeraj, On 10/12/14 8:26 AM, Service Symphony wrote: > I have got it working, since the server is not started yet, none > of the underlying infrastructure is available in the realm class > constructor. If you extend RealmBase (a good idea), then y

Re: Custom Realm

2014-10-13 Thread Daniel Mikusa
On Sun, Oct 12, 2014 at 8:26 AM, Service Symphony < mee...@servicesymphony.com> wrote: > I have got it working, since the server is not started yet, none of the > underlying infrastructure is available in the realm class constructor. > > Sent from my iPhone > > > On 11 Oct 2014, at 22:37, Meeraj K

Re: Custom Realm

2014-10-12 Thread Service Symphony
I have got it working, since the server is not started yet, none of the underlying infrastructure is available in the realm class constructor. Sent from my iPhone > On 11 Oct 2014, at 22:37, Meeraj Kunnumpurath > wrote: > > Hi, > > I have some specific requirements for security and I have be

Re: Custom Realm - Tomcat 5.5 to Tomcat 7 Migration

2011-08-19 Thread Konstantin Kolinko
2011/8/19 Steve Ratay : > I have a custom realm that is quite complex and uses a variety of third party > libraries, including Spring.  In Tomcat 5.5, I placed the Realm and all of > the JARs it depended upon in the server/lib directory.  This kept these > classes in the Catalina class loader, w

RE: Custom Realm

2010-08-29 Thread Caldarale, Charles R
> From: Michael Dockery [mailto:dockeryjava...@yahoo.com] > Subject: Custom Realm > Q1) Should I create a new custom realm (..subClass > of RealmBase) which is based-on/copied-from the > original/standard tomcat realm?   You can, but wouldn't it be simpler to subclass the realm whose behavior

Re: Custom Realm - How to get the authenticated principal?

2009-03-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ambarish, On 3/4/2009 6:11 AM, Ambarish Mitra wrote: > The external system does not store the tomcat realm roles. Why don't you do what I suggested and override the hasRole() method in your Realm to return true unconditionally? Or, you could include

Re: Custom Realm - How to get the authenticated principal?

2009-03-04 Thread Pid
Ambarish Mitra wrote: >>> The custom valve talks with an external authentication system and gets > the >>> username. The external system does not store the roles. >>> >>> The authenticated username is then read in the Valve - it is one of the >>> usernames in the tomcat Realm. Now, from here in th

RE: Custom Realm - How to get the authenticated principal?

2009-03-04 Thread Ambarish Mitra
>> >> The custom valve talks with an external authentication system and gets the >> username. The external system does not store the roles. >> >> The authenticated username is then read in the Valve - it is one of the >> usernames in the tomcat Realm. Now, from here in the Valve, how do I get > t

Re: Custom Realm - How to get the authenticated principal?

2009-03-04 Thread Pid
Ambarish Mitra wrote: >> How do I get the roles of the user in the custom Valve? >> >> The custom valve talks with an external authentication system and gets the >> username. The external system does not store the roles. >> >> The authenticated username is then read in the Valve - it is one of the

RE: Custom Realm - How to get the authenticated principal?

2009-03-04 Thread Ambarish Mitra
> > What is not working is: The external system has no role for the user. So, > the valve sets the GenericPrincipal with no roles. Therefore, the principal > is getting authorization denied (although authentication succeeds) because > we have granted to roles=role1, tomcat in web.xml file. > > (T

Re: Custom Realm - How to get the authenticated principal?

2009-03-04 Thread Pid
Ambarish Mitra wrote: > On 3/3/2009 7:57 AM, Ambarish Mitra wrote: >> Goal: I have a web-app which I have protected with an external >> authentication engine. To achieve this, I have written a custom valve > which >> sets a principal. > > I'm not sure you need a Valve. Why not just write a custom

RE: Custom Realm - How to get the authenticated principal?

2009-03-03 Thread Ambarish Mitra
On 3/3/2009 7:57 AM, Ambarish Mitra wrote: > Goal: I have a web-app which I have protected with an external > authentication engine. To achieve this, I have written a custom valve which > sets a principal. I'm not sure you need a Valve. Why not just write a custom Realm (as you have done) and use

Re: Custom Realm - How to get the authenticated principal?

2009-03-03 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ambarish, On 3/3/2009 7:57 AM, Ambarish Mitra wrote: > Goal: I have a web-app which I have protected with an external > authentication engine. To achieve this, I have written a custom valve which > sets a principal. I'm not sure you need a Valve. Why

Re: Custom realm extending JDBCRealm

2006-03-24 Thread Alessandro Colantoni
HI!! Just solved. I was using tomcat 5.5.0. I was looking at sources of 5.5.16. I suppose that the authenticate method of 5.5.0 doesn't use getPassord method. I tried it in 5.5.16 and everything works fine Thanks for attention Alessandro On 3/24/06, Alessandro Colantoni <[EMAIL PROTECTED]> wrote: