Thanks a lot, it works great. Driver is loaded from catalina_base now.
-Original Message-
From: Christopher Schultz
Reply-To: Tomcat Users List
To: users@tomcat.apache.org
Subject: Re: JDBCRealm driver location 9.0.24
Date: Sun, 1 Aug 2021 18:08:16 -0400
Stephane,
On 8/1/21 11:17
Stephane,
On 8/1/21 11:17, Stephane wrote:
I'm trying to distinguish catalina_home from catalina_base and I use a
JDBCRealm and soon will probably use other realms.
Don't use JDBCRealm. Instead, use DataSourceRealm. It's a long story,
but DataSourceRealm is what you want for production and JD
ment (build 1.7.0_65-b20)
Java HotSpot(TM) Client VM (build 24.65-b04, mixed mode, sharing)
Regards, Vince
> -Original Message-
> From: Christopher Schultz [mailto:ch...@christopherschultz.net]
> Sent: 14 November 2014 02:35
> To: Tomcat Users List
> Subject: Re: JDBCRealm -
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Vince,
On 11/10/14 11:02 AM, vince.w...@thomsonreuters.com wrote:
> I have Tomcat 8.0.9 running under NetBeans. An application using
> JDBCRealm is authenticating and authorising users OK but Tomcat is
> logging errors.
I don't believe much has c
Hello Mark,
Thanks for pointing out my missing localDataResource property. It is
prominent enough in the wiki, I just failed to pay close attention.
With this property, the everything in META-INF/context.xml configuration
worked.
Other configurations still do not work except the one I described (R
Comments inline.
On 10/7/2012 3:31 PM, Aladin Dajani wrote:
Hello Pid,
I cannot dismiss that there may be inaccuracies as you mentioned in your
response, perhaps you could help me figure them out.
Here are the cases I tried (the first three were outlined in the wiki
http://wiki.apache.org/tomc
Hello Pid,
I cannot dismiss that there may be inaccuracies as you mentioned in your
response, perhaps you could help me figure them out.
Here are the cases I tried (the first three were outlined in the wiki
http://wiki.apache.org/tomcat/TomcatDataSourceRealms)
MY REALM ELEMENT:
MY RESO
On 07/10/2012 19:40, Aladin Dajani wrote:
> Thank you all for your help. I now have DataSourceRealm based
> authentication up and running with my connection pool.
>
> One thing I want to mention is that I was unable to make teh scenarios
> described in the wiki work until I duplicated the Resourc
Thank you all for your help. I now have DataSourceRealm based
authentication up and running with my connection pool.
One thing I want to mention is that I was unable to make teh scenarios
described in the wiki work until I duplicated the Resource definition in
both server.xml and in context.xml.
On 10/7/2012 8:22 AM, Pid * wrote:
On 7 Oct 2012, at 15:26, Aladin Dajani wrote:
OK So I tried to use DataSourceRealm. Seems simple enough. but I get the
following exception:
Oct 7, 2012 9:54:51 AM org.apache.catalina.realm.DataSourceRealm open
SEVERE: Exception performing authentication
jav
On 7 Oct 2012, at 15:26, Aladin Dajani wrote:
> OK So I tried to use DataSourceRealm. Seems simple enough. but I get the
> following exception:
>
> Oct 7, 2012 9:54:51 AM org.apache.catalina.realm.DataSourceRealm open
> SEVERE: Exception performing authentication
> javax.naming.NameNotFoundExcep
OK So I tried to use DataSourceRealm. Seems simple enough. but I get the
following exception:
Oct 7, 2012 9:54:51 AM org.apache.catalina.realm.DataSourceRealm open
SEVERE: Exception performing authentication
javax.naming.NameNotFoundException: Name jdbc is not bound in this Context
Here is my co
Thanks Felix, This does look like what I need.
On Sun, Oct 7, 2012 at 9:36 AM, Felix Schumacher <
felix.schumac...@internetallee.de> wrote:
>
>
> Aladin Dajani schrieb:
>
> >Hello List,
> >
> >My application is configured for JDBCRealm authentication uses a MySQL
> >database.
> >For my own use i
Aladin Dajani schrieb:
>Hello List,
>
>My application is configured for JDBCRealm authentication uses a MySQL
>database.
>For my own use inside the application, I have setup a connection pool
>to
>access the database, However, the configuration of JDBCRealm in
>server.xml
>uses astand-alone co
> From: ubk [mailto:m.urbanow...@o2.pl]
> Subject: JDBCRealm, Tomcat and MySQL
>
>
> type="javax.sql.DataSource"/>
>
You say you're using Tomcat 6.0.18, but the config you've specified
is for some ancient version. Read the doc appropriate to your level:
http://tomcat.apa
Pid-2 wrote:
>
>
> Tomcat version?
>
> Are you sure you can connect to the database using the db user/pass
> you've specified?
>
>
> p
>
>
> -
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional
ubk wrote:
> Hi all
> I have a problem with authorization based on JDBCRealm. When I'm trying to
> get access to some html page which is store in protected directory all that
> I can see is just login-error.jsp page. I'm using login and password from my
> database.
>
>
> My server.xml:
>
>
>
Thanks, Troy,
It works indeed, but I understand why it is better to have two
separate tables. Just needed to do it fast...
Thanks again,
Alex
On Feb 24, 2009, at 12:44 AM, Troy Davis wrote:
Hi Alex,
In most circumstances I would recommend otherwise, I've been
surprised by several apps I
Hi Alex,
In most circumstances I would recommend otherwise, I've been surprised
by several apps I've written where users develop a need to belong to
multiple groups.
But I've done the same thing for unusual circumstances, just give the
same table name for the realm's config values.
HTH,
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Stephen,
Stephen More wrote:
> Both of these would require a Filter that checks for the existence of
> the role "expiredPassword" and redirect as needed.
Yes. That's why I did it myself all in a single filter (including
loading the user's state, rath
I just find it hard to believe that there is no open-source
project/library to mange users that includes the above functionality.
Web server logins are dismal across the board, but its so easy to write
a filter so I think nobody bothered.
Peter
Stephen More wrote:
On 8/22/07, Christopher Sc
On 8/22/07, Christopher Schultz <[EMAIL PROTECTED]> wrote:
> 1. Checks to see if the Session exists and has a Principal.
> 2. Checks to see if the Session contains my "User" object.
>If not, it loads the User object and performs the "real" login
>(as opposed to the basic authentication prov
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Stephen,
Stephen More wrote:
> On 8/21/07, Christopher Schultz <[EMAIL PROTECTED]> wrote:
>> Stephen More wrote:
>>> Has anyone written or know of a JDBCRealm that supports an expired password
>>> ?
>> Do you mean that you want expired-password-users
Hi Steven
You are limited as to what logic the realm performs automatically,
checking for expired passwords requires some manual work on your side.
You might want to look at implementing a JAASRealm, and your own login
module:
See the bottom of this page:
http://tomcat.apache.org/tomcat-5.5-
In looking at the docs:
http://tomcat.apache.org/tomcat-5.5-doc/config/realm.html
there is no Attribute for "userCredExpireCol". How do I configure the
JDBCRealm to look at an expiration column ?
-Steve
On 8/22/07, Peter Stavrinides <[EMAIL PROTECTED]> wrote:
> I also didn't understand exactly w
I also didn't understand exactly what you mean, but 'JDBCRealm'... implies
using a database, so the simple way is to redirect and use a web form to change
it, which is easy enough. If you don't want to use a web form then its an
entirely different story, I assume some sort of extension or custo
On 8/21/07, Christopher Schultz <[EMAIL PROTECTED]> wrote:
> Stephen More wrote:
> > Has anyone written or know of a JDBCRealm that supports an expired password
> > ?
>
> Do you mean that you want expired-password-users to be forced to change
> their password before doing anything else?
Yes, this
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Stephen,
Stephen More wrote:
> Has anyone written or know of a JDBCRealm that supports an expired password ?
Can you phrase that in a different way? I wouldn't want my JDBCRealm to
allow expired passwords to be used.
Do you mean that you want expire
> From: Christopher Schultz [mailto:[EMAIL PROTECTED]
> Subject: Re: JDBCRealm
>
> I believe the OP said he was running on TC 5.0.
Actually, he didn't. He did refer to level 5.0.5 of the MySQL JDBC
driver, and Martin gave a reference to 5.5 documentation. The OP has
not expli
maybe I'm on such an old version, but I can't pass parameters thru my conn
string like you have here.
-Original Message-
From: Martin Gainty [mailto:[EMAIL PROTECTED]
Sent: Thursday, May 03, 2007 7:03 PM
To: Tomcat Users List
Subject: Re: JDBCRealm
Murtuza
here is server.x
sender immediately by telephone or email and destroy the original
>>>message without making a copy. Thank you.
>>>
>>>- Original Message -
>>>From: "Murtuza" <[EMAIL PROTECTED]>
>>>To:
>>>Sent: Friday, May 04, 2007 9:00 AM
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Chuck,
Caldarale, Charles R wrote:
>> From: David Smith [mailto:[EMAIL PROTECTED]
>> Subject: Re: JDBCRealm
>>
>> tomcat/lib?? That directory doesn't exist in the default
>> distribution from tomcat.
>
&
> From: David Smith [mailto:[EMAIL PROTECTED]
> Subject: Re: JDBCRealm
>
> tomcat/lib?? That directory doesn't exist in the default
> distribution from tomcat.
It does in the 6.0 versions of Tomcat, where the classloader hierarchy
has been greatly simplified.
- Chuck
ot;Murtuza" <[EMAIL PROTECTED]>
To:
Sent: Friday, May 04, 2007 9:00 AM
Subject: Re: JDBCRealm
doesn't work if I change the server.xml also, I am providing the same
information ic context.xml. the same code works fine on my windows
machine
but not on linux. I think tomcat is
--
> From: "Murtuza" <[EMAIL PROTECTED]>
> To:
> Sent: Friday, May 04, 2007 9:00 AM
> Subject: Re: JDBCRealm
>
>
>>
>> doesn't work if I change the server.xml also, I am providing the same
>> information ic context.xml. the same code works
--
> From: "Murtuza" <[EMAIL PROTECTED]>
> To:
> Sent: Friday, May 04, 2007 9:00 AM
> Subject: Re: JDBCRealm
>
>
>>
>> doesn't work if I change the server.xml also, I am providing the same
>> information ic context.xml. the same code works
: Friday, May 04, 2007 9:00 AM
Subject: Re: JDBCRealm
doesn't work if I change the server.xml also, I am providing the same
information ic context.xml. the same code works fine on my windows machine
but not on linux. I think tomcat is not picking up the jdbc driver for
mysql
that I copied
riginal
> message without making a copy. Thank you.
>
> - Original Message -
> From: "Murtuza" <[EMAIL PROTECTED]>
> To:
> Sent: Thursday, May 03, 2007 6:37 PM
> Subject: Re: JDBCRealm
>
>
>>
>> below is my context.xml file. I can conn
have received this email message in error, please notify
the sender immediately by telephone or email and destroy the original
message without making a copy. Thank you.
- Original Message -
From: "Murtuza" <[EMAIL PROTECTED]>
To:
Sent: Thursday, May 03, 2007 6:3
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Murtuza,
> docBase="security"
You should specify neither the "path" nor the "docBase" attributes when
you are using a context.xml file. This is probably not the problem, but
could be causing some other problems.
The only thing I can think
below is my context.xml file. I can connect to the mysql database from a java
class with the same username/pass.
Martin Gainty wrote:
>
> Have you verified the mysql listener is listening?
> Have you verified the JDBCRealm is configured using the parameters which
> will allow you to co
Have you verified the mysql listener is listening?
Have you verified the JDBCRealm is configured using the parameters which
will allow you to connect?
If you are able to confirm both please post your JDBCRealm parameters here
Martin
This email message and any files transmitted with it contain c
>
> From: Wojtek Kusch <[EMAIL PROTECTED]>
> Date: 2006/12/19 Tue AM 11:52:20 EST
> To: users@tomcat.apache.org
> Subject: JDBCRealm
>
> Hallo!
>
> I am a newbie. I am defining a JDBCRealm for my web application in the
> server.xml:
>
> driverName="sun.jdbc.odbc.JdbcOdbcDriver"
Hi ,
Thanks for the replies, really appreciate that.
I am using BASIC because i am authenticating webservice calls. I
already have FORM for a sister application which provides web based access.
I want to log authentication failures.
Is the only option i have is overwrite
A little googling confirmed my earlier suspicion. The 401 response
contains the error page. This is why you can't redirect a 401 error
like a 404 or other error responses.
-David
Pid wrote:
If you're using a JDBC realm then you are using Tomcats authentication,
which operates at a higher l
If you're using a JDBC realm then you are using Tomcats authentication,
which operates at a higher level than Filters and Servlets, so you can't
insert anything into the chain there.
With Basic Auth, the browser does the submission of credentials, based
on the error codes that the server sends.
S
I believe in BASIC auth, the client already has the auth failed page
during authentication. Once authentication fails, that page is
displayed. Short of the images and other resources the error page
needs, there is not another request to the server hence no filter call.
--David
Dhiraj Ramakr
"'Martin Gainty'"
<[EMAIL PROTECTED]>
Sent: Sunday, May 21, 2006 6:45 AM
Subject: RE: JDBCRealm authentication failing with MD5
Martin
Thanks for the reply. I already went through a similar page, but with no
success.
Subsequent to your reply I k
caused some problem,
since although the digest looked similar, it was not.
Thanks for the help
Regards,
Rian
-Original Message-
From: Martin Gainty [mailto:[EMAIL PROTECTED]
Sent: 20 May 2006 15:56
To: Tomcat Users List
Subject: Re: JDBCRealm authentication failing with MD5
Good
Good Morning Rian-
I would suggest having a look at and following all of the steps in the JDBC
How to tutorial at
http://tomcat.apache.org/tomcat-3.3-doc/JDBCRealm-howto.html
the important item here is to exercise the basic functionality of generating
a digested MD5 password which can be accom
Hi, (undecipherable name :))
There are 2 kinds of web pages in a webapp:
those with a security-constraint (see security-constraint
part of web.xml description on the net), and those who have
no security-constraints. If you want your welcome accessible without
authentification, then it must have no
51 matches
Mail list logo
