Re: Tomcat Authentication + Spring Security J2EEPreAuthentication

2019-05-21 Thread Michael Osipov
Am 2019-05-20 um 21:35 schrieb Nacho Ganguli: My last attempt used Spring Security JEE pre-authentication filters. This works as I would like "provided" that I only use basic auth and tomcat's default realm (tomcat-users.xml). As soon as I introduce form-based auth, it does not work and I am pro

Re: Tomcat Authentication + Spring Security J2EEPreAuthentication

2019-05-20 Thread Nacho Ganguli
My last attempt used Spring Security JEE pre-authentication filters. This works as I would like "provided" that I only use basic auth and tomcat's default realm (tomcat-users.xml). As soon as I introduce form-based auth, it does not work and I am prompted to authenticate a second time. The log fi

Re: Tomcat Authentication + Spring Security J2EEPreAuthentication

2019-05-18 Thread Michael Osipov
Am 2019-05-17 um 19:11 schrieb Nacho Ganguli: HELP, I NEED SOMEBODY, NOT JUST ANYBODY! HELP (It all started weeks ago when I tried unsuccessfully to use Tomcat's SSO Valve and decided to try pre-authentication...) We are developing a subscription-based "portal" webapp that we use to authen

Re: Tomcat authentication custom realm digest="md5" ignored

2007-06-30 Thread Mark Thomas
[EMAIL PROTECTED] wrote: > > I have this setup working on my Windows development computer under > Tomcat 5.5. Everything works fine. I get a hash value from Oracle and > pass it back to Tomcat on request. > > BUT! I can't get it to work in test environment on Solaris under Tomcat > 5.0.28. The m

Re: Tomcat Authentication

2005-11-09 Thread Khawaja Shams
Does this mean that if I am using the JDBC realm, tomcat will hit the database for verifying username and password for every request? Also, if this is really happening, then the user will need to authenticate himself for each of his request, meaning that nonce for the digest challenge will be diffe

Re: Tomcat Authentication

2005-11-09 Thread Peter Menzel
Hi, Khawaja Shams schrieb: Hello everyone, I have a few strict requirements for security on my project, and I am having a hard time understanding some concepts. I cannot use SSL due to the performance loss, and the application must be accessed only by authenticated users. Meanwhile, I am require