Re: SSO SPNEGO GSS API CheckSum Failed Error

2024-02-23 Thread Tom Delaney
oginModule required; > }; > spnego-server_devexample { > com.sun.security.auth.module.Krb5LoginModule required > useKeyTab=true > keyTab="/usr/local/tomcat/krb5.keytab" > storeKey=true > principal="HTTP/devexample.domain@domain.com" > isInitiator=false > forwa

SSO SPNEGO GSS API CheckSum Failed Error

2024-02-23 Thread Thomas Delaney
01.domain.com:88 default_domain = .domain.com } [domain_realm] .domain.com = DOMAIN.COM *Keytab was generated on AD domain Controller* DSADD user "cn=SA_EXDEV_SSO",cn=users,dc=DOMAIN,dc=COM" -pwd password -display SA_EXDEV_SSO -pwdneverexpires yes "SSO-EXAMPLE EXDEV SSO&qu

Re: [OT] SSO Token not found with RewriteRules

2023-01-27 Thread Christopher Schultz
On 1/24/23 08:04, Berneburg, Cris J. - US wrote: Hey Chris I always include a ROOT context so I don't get nasty errors if there is some kind of misconfiguration at the proxy, etc. It also allows rewrites to be done "outside" of "the application", etc. Out of curiosity, what do you put in t

RE: [OT] SSO Token not found with RewriteRules

2023-01-24 Thread Berneburg, Cris J. - US
Hey Chris > I always include a ROOT context so I don't get nasty errors if > there is some kind of misconfiguration at the proxy, etc. It also > allows rewrites to be done "outside" of "the application", etc. Out of curiosity, what do you put in that ROOT context? A dummy / placeholder or the r

Re: [OT] SSO Token not found with RewriteRules

2023-01-18 Thread Christopher Schultz
Jerry, On 1/17/23 13:30, Jerry Malcolm wrote: In my philosophy for years (possibly not the best philosophy...), the root was for primarily static stuff.  And any JSPs that might need to be in root were sent to other non-root contexts via a rewrite.  I've been moving away from that philosophy i

Re: SSO Token not found with RewriteRules

2023-01-17 Thread Jerry Malcolm
ine to the entire problem is that RewriteRules with SSO is not permitted UNLESS there is a dummy ROOT webapp defined.  I'm not sure why this would be  a requirement, and I was not able to find any documentation about it.   I understand why SSO might require contexts.  But the primary purpose

Re: SSO Token not found with RewriteRules

2023-01-17 Thread Jerry Malcolm
ng ignored.  convertCookies was called, which did a getContext() which returned null, so everything aborted. getContext() failed apparently because I did not have a ROOT webapp (context) defined.  I added a dummy ROOT webapp, and voila So the bottom line to the entire problem is that RewriteRules w

Re: SSO Token not found with RewriteRules

2023-01-17 Thread Mark Thomas
g ignored.  convertCookies was called, which did a getContext() which returned null, so everything aborted.  getContext() failed apparently because I did not have a ROOT webapp (context) defined.  I added a dummy ROOT webapp, and voila So the bottom line to the entire problem is that RewriteRules wi

Re: SSO Token not found with RewriteRules

2023-01-17 Thread Mark Thomas
getContext() which returned null, so everything aborted.  getContext() failed apparently because I did not have a ROOT webapp (context) defined.  I added a dummy ROOT webapp, and voila So the bottom line to the entire problem is that RewriteRules with SSO is not permitted UNLESS there

Re: SSO Token not found with RewriteRules

2023-01-16 Thread Jerry Malcolm
everything aborted.  getContext() failed apparently because I did not have a ROOT webapp (context) defined.  I added a dummy ROOT webapp, and voila So the bottom line to the entire problem is that RewriteRules with SSO is not permitted UNLESS there is a dummy ROOT webapp defined.  I'm no

SSO Token not found with RewriteRules

2023-01-15 Thread Jerry Malcolm
k] is not available"  I enabled redirect logs, and they show SSO token not found.   I know the redirect is working fine for the new  virtual host since there's no problems going to unprotected (no sign-in) redirected pages. This exact scenario works perfectly fine (with rewrite rules

Re: SAML SSO Login issue

2022-05-13 Thread Christopher Schultz
Harish, On 5/11/22 11:36, harish lal wrote: Facing SSO Login issue after upgrade from Tomcat 6.0.33 to Tomcat 7.0.62 We upgraded our application from Tomcat 6.0.33 to Tomcat 7.0.62 due to web socket dependency in Tomcat. After upgrade , while try to do SAML SSO login from application we are

Re: SAML SSO Login issue

2022-05-11 Thread Olaf Kock
On 11.05.22 17:36, harish lal wrote: > Facing SSO Login issue after upgrade from Tomcat 6.0.33 to Tomcat 7.0.62 > > We upgraded our application from Tomcat 6.0.33 to Tomcat 7.0.62 due to web > socket dependency in Tomcat. > After upgrade , while try to do SAML SSO login from app

SAML SSO Login issue

2022-05-11 Thread harish lal
Facing SSO Login issue after upgrade from Tomcat 6.0.33 to Tomcat 7.0.62 We upgraded our application from Tomcat 6.0.33 to Tomcat 7.0.62 due to web socket dependency in Tomcat. After upgrade , while try to do SAML SSO login from application we are facing below issue , "This page isn’t wo

Re: Apex SSO

2022-03-25 Thread Luis Rodríguez Fernández
] https://www.keycloak.org/docs/latest/securing_apps/index.html#_saml-tomcat-adapter [3] https://github.com/cerndb/tomcat-sso-integration-components/blob/master/cern-tomcat-authentication-kit/src/main/java/ch/cern/sso/tomcat/valves/SsoHeadersValve.java El vie, 25 mar 2022 a las 16:08, rupali singh

Re: Apex SSO

2022-03-25 Thread rupali singh
hi team, the reason im asking is we have document for apex and idcs integration https://www.ateam-oracle.com/post/integrating-sso-between-apex-cloud-and-identity-cloud-service-the-easy-way i did all the setup as per document but now the issue is apex is not redirecting to idcs url and giving

Re: Apex SSO

2022-03-25 Thread Peter Chiu
Hi Chris, To implement APEX SSO, that requires NO change to tomcat. That is why I tried not to post here. Here is the blog for starters. https://fuzziebrain.com/content/id/1908/ If tomcat is behind a proxy (apache or nginx), we might need to change a setting in server.xml to return the real

Re: Apex SSO

2022-03-25 Thread Christopher Schultz
ossible can you please share steps for azure AD with me on rupali.r.si...@gmail.com On Thu, 24 Mar 2022 at 21:21, Peter Chiu wrote: I have a working APEX SSO against Azure AD or On-Permise AD. On Thu, Mar 24, 2022 at 1:13 PM rupali singh wrote: HI Team, We are using apex 21.1 with tomcat 9

Re: Apex SSO

2022-03-25 Thread rupali singh
url at all. On Thu, Mar 24, 2022, 10:42 PM rupali singh wrote: > HI Team, > > We are using apex 21.1 with tomcat 9.54. > we want to implement SSO for application deployed in Apex with IDCS > reference URL : > https://www.ateam-oracle.com/post/integrating-apex-with-oracle-iden

Re: Apex SSO

2022-03-24 Thread Peter Chiu
n you please share steps for azure AD with me on > rupali.r.si...@gmail.com > > > > On Thu, 24 Mar 2022 at 21:21, Peter Chiu wrote: > > > I have a working APEX SSO against Azure AD or On-Permise AD. > > > > On Thu, Mar 24, 2022 at 1:13 PM rupali singh > > w

Re: Apex SSO

2022-03-24 Thread rupali singh
Hi Peter, Are u using apache web server with tomcat or its only tomcat . if possible can you please share steps for azure AD with me on rupali.r.si...@gmail.com On Thu, 24 Mar 2022 at 21:21, Peter Chiu wrote: > I have a working APEX SSO against Azure AD or On-Permise AD. > > On Th

Re: Apex SSO

2022-03-24 Thread Peter Chiu
I have a working APEX SSO against Azure AD or On-Permise AD. On Thu, Mar 24, 2022 at 1:13 PM rupali singh wrote: > HI Team, > > We are using apex 21.1 with tomcat 9.54. > we want to implement SSO for application deployed in Apex with IDCS > reference URL : > > https://www.

Apex SSO

2022-03-24 Thread rupali singh
HI Team, We are using apex 21.1 with tomcat 9.54. we want to implement SSO for application deployed in Apex with IDCS reference URL : https://www.ateam-oracle.com/post/integrating-apex-with-oracle-identity-cloud-service but apex is not at all redirecting to IDCS URL and as per Oracle issue is

RE: JNDI ldaps Problem with SSO

2021-05-27 Thread Susan.Wood
Hi Christopher Enclosed is the stacktrace of the tomcat (localhost) 03-Mar-2021 15:57:15.221 SEVERE [http-nio-8080-exec-10] org.apache.catalina.realm.JNDIRealm.authenticate Exception performing authentication javax.naming.NamingException: [LDAP: error code 1 - 04DC: LdapErr: DSID-0C0907E

RE: JNDI ldaps Problem with SSO

2021-05-20 Thread Susan.Wood
> -Original Message- > From: Christopher Schultz > Sent: Donnerstag, 20. Mai 2021 18:37 > To: users@tomcat.apache.org > Subject: Re: JNDI ldaps Problem with SSO > > Susan, > > On 5/18/21 16:58, susan.w...@swisscom.com wrote: > > When we are using plain ldap 3268, a

Re: JNDI ldaps Problem with SSO

2021-05-20 Thread Christopher Schultz
ce and not just the message? -chris -Original Message- From: Christopher Schultz Sent: Dienstag, 18. Mai 2021 18:02 To: users@tomcat.apache.org Subject: Re: JNDI ldaps Problem with SSO Susan, On 5/18/21 09:43, susan.w...@swisscom.com wrote: Hi all apache-tomcat-8.0.36 java ve

RE: JNDI ldaps Problem with SSO

2021-05-18 Thread Susan.Wood
: # extended LDIF # # LDAPv3 # base with scope subtree # filter: (objectclass=*) # requesting: ALL # Organization, Schema, Configuration, bcintra.ch We think, ssl-handshake is fine but bind is failing. Why? Thank you Susan > -Original Message- > From: Christopher Schultz > Sent: Die

Re: JNDI ldaps Problem with SSO

2021-05-18 Thread Christopher Schultz
Susan, On 5/18/21 09:43, susan.w...@swisscom.com wrote: Hi all apache-tomcat-8.0.36 java version "1.8.0_281" Java(TM) SE Runtime Environment (build 1.8.0_281-b09) Java HotSpot(TM) 64-Bit Server VM (build 25.281-b09, mixed mode) We are having a problem with our Single sign On config. When usin

JNDI ldaps Problem with SSO

2021-05-18 Thread Susan.Wood
Hi all apache-tomcat-8.0.36 java version "1.8.0_281" Java(TM) SE Runtime Environment (build 1.8.0_281-b09) Java HotSpot(TM) 64-Bit Server VM (build 25.281-b09, mixed mode) We are having a problem with our Single sign On config. When using ldap - all works well. When switiching to ldaps , the Us

Re: JNDI ldaps Problem with SSO

2021-02-25 Thread Luis Rodríguez Fernández
there maybe another debug Option for the ldap? > > > > Thank you > > > > Susan > > > > > > > > > -----Original Message- > > > From: Brian Wolfe > > > Sent: Donnerstag, 25. Februar 2021 17:00 > > > To: Tomcat Users Lis

Re: JNDI ldaps Problem with SSO

2021-02-25 Thread Brian Wolfe
aps with port 3269 fails > > Is there maybe another debug Option for the ldap? > > Thank you > > Susan > > > > > -Original Message- > > From: Brian Wolfe > > Sent: Donnerstag, 25. Februar 2021 17:00 > > To: Tomcat Users List > > Subje

RE: JNDI ldaps Problem with SSO

2021-02-25 Thread Susan.Wood
: JNDI ldaps Problem with SSO > > if you define the truststore on the command line it will ignore the cacerts > file. > Also looks like you're trying to connect to AD over the catalog port. > I would suggest using the LDAPS port 636. The GC port is used to search > things with

Re: JNDI ldaps Problem with SSO

2021-02-25 Thread Brian Wolfe
m. > Could it be, that a ssl config is necessary too? > > Thank you > > Susan > > > -Original Message- > > From: Bill Stewart > > Sent: Donnerstag, 25. Februar 2021 16:04 > > To: Tomcat Users List > > Subject: Re: JNDI ldaps Problem wit

RE: JNDI ldaps Problem with SSO

2021-02-25 Thread Susan.Wood
ginal Message- > From: Bill Stewart > Sent: Donnerstag, 25. Februar 2021 16:04 > To: Tomcat Users List > Subject: Re: JNDI ldaps Problem with SSO > > On Thu, Feb 25, 2021 at 2:31 AM wrote: > > We are having a problem with our Single sign On config. > > When using ldap -

Re: JNDI ldaps Problem with SSO

2021-02-25 Thread Bill Stewart
On Thu, Feb 25, 2021 at 2:31 AM wrote: We are having a problem with our Single sign On config. > When using ldap - all works well. > > When switiching to ldaps , the User loses to connection all together > (Server not reachable) > > server.xml > > Good: > connection

JNDI ldaps Problem with SSO

2021-02-25 Thread Susan.Wood
Hi all apache-tomcat-8.0.36 java version "1.8.0_281" Java(TM) SE Runtime Environment (build 1.8.0_281-b09) Java HotSpot(TM) 64-Bit Server VM (build 25.281-b09, mixed mode) We are having a problem with our Single sign On config. When using ldap - all works well. When switiching to ldaps , the Us

Re: Tomcat SSO valve implementation

2020-12-22 Thread Brian Wolfe
l Message- > > From: André Warnier (tomcat/perl) > > Sent: Thursday, December 17, 2020 8:42 AM > > To: users@tomcat.apache.org > > Subject: Re: Tomcat SSO valve implementation > > > > On 16.12.2020 19:39, Kevin Oxley wrote: > > > We are trying to sup

Re: Tomcat SSO valve implementation

2020-12-22 Thread Steve Sanders
> George > > -Original Message- > From: André Warnier (tomcat/perl) > Sent: Thursday, December 17, 2020 8:42 AM > To: users@tomcat.apache.org > Subject: Re: Tomcat SSO valve implementation > > On 16.12.2020 19:39, Kevin Oxley wrote: > > We are trying to support

RE: Tomcat SSO valve implementation

2020-12-21 Thread George Stanchev
- From: André Warnier (tomcat/perl) Sent: Thursday, December 17, 2020 8:42 AM To: users@tomcat.apache.org Subject: Re: Tomcat SSO valve implementation On 16.12.2020 19:39, Kevin Oxley wrote: > We are trying to support SSO SAML 2.0 for user authentication in Tomcat > (9.0.22). Can a

Re: Tomcat SSO valve implementation

2020-12-17 Thread tomcat/perl
On 16.12.2020 19:39, Kevin Oxley wrote: We are trying to support SSO SAML 2.0 for user authentication in Tomcat (9.0.22). Can anybody provide a reference to a pre-integrated SAML SSO valve implementation that you've had a good experience with? searching Google for "SAML SP f

Tomcat SSO valve implementation

2020-12-16 Thread Kevin Oxley
We are trying to support SSO SAML 2.0 for user authentication in Tomcat (9.0.22). Can anybody provide a reference to a pre-integrated SAML SSO valve implementation that you've had a good experience with? -- Thanks, Kevin

RE: SSO fails on Tomcat 9

2019-09-25 Thread Heidi Leerink - Duverger
Hello Mark,André, No success on my side for SSO, I have installed 9.0.26 and changed the config according to this mail but no success. Regards, Heidi Leerink - Duverger -Oorspronkelijk bericht- Van: Mark Thomas Verzonden: dinsdag 10 september 2019 18:07 Aan: users@tomcat.apache.org

Re: SSO fails on Tomcat 9

2019-09-10 Thread Mark Thomas
On 10/09/2019 16:47, André Warnier (tomcat) wrote: > On 10.09.2019 15:38, Mark Thomas wrote: >> On 06/09/2019 13:20, Heidi Leerink - Duverger wrote: >>> Hello Mark, >>> >>> That helps somewhat, my browser now shows the login page for our >>> application, BUT I do not get my username in HTTP variabl

Re: SSO fails on Tomcat 9

2019-09-10 Thread tomcat
On 10.09.2019 15:38, Mark Thomas wrote: On 06/09/2019 13:20, Heidi Leerink - Duverger wrote: Hello Mark, That helps somewhat, my browser now shows the login page for our application, BUT I do not get my username in HTTP variable REMOTE_USER but the principal keytab related name. So instead o

Re: SSO fails on Tomcat 9

2019-09-10 Thread Mark Thomas
On 06/09/2019 13:20, Heidi Leerink - Duverger wrote: > Hello Mark, > > That helps somewhat, my browser now shows the login page for our application, > BUT I do not get my username in HTTP variable REMOTE_USER but the principal > keytab related name. > > So instead of hduverge I get HTTP/nlsl-de

RE: SSO fails on Tomcat 9

2019-09-06 Thread Heidi Leerink - Duverger
more customers required SSO. So I configured Tomcat with Spnego based on an Oracle blog, and that worked fine in Tomcat 7 and 8. But now some customers want to upgrade to Tomcat 9 The application only uses the HTTP variable :REMOTE_USER to decide if there is a SSO configuration present and if so

RE: SSO fails on Tomcat 9

2019-09-06 Thread Heidi Leerink - Duverger
note that internet communications are not secure and e-mails are susceptible to change. Thank you for your cooperation. -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: vrijdag 6 september 2019 11:55 To: users@tomcat.apache.org Subject: Re: SSO fails on Tomcat 9 On

Re: SSO fails on Tomcat 9

2019-09-06 Thread tomcat
unlawful. Please note that internet communications are not secure and e-mails are susceptible to change. Thank you for your cooperation. -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: woensdag 4 september 2019 11:09 To: users@tomcat.apache.org Subject: Re: SSO fai

Re: SSO fails on Tomcat 9

2019-09-06 Thread Mark Thomas
. Do not disclose the contents of this document to > any other persons. Violation of this notice may be unlawful. Please note that > internet communications are not secure and e-mails are susceptible to change. > Thank you for your cooperation. > > -Original Message- > Fr

Re: SSO fails on Tomcat 9

2019-09-04 Thread Mark Thomas
Heidi, I have just completed the tests and SPNEGO works as expected with both Tomcat 8.5.x and 9.0.x. The test environment was as per: http://tomcat.apache.org/tomcat-9.0-doc/windows-auth-howto.html with the following changes: - Updated the Domain Controller and Tomcat instance with all the late

SSO fails on Tomcat 9

2019-09-03 Thread calder
On Tuesday, September 3, 2019, André Warnier (tomcat) wrote: > > > Note : why it would work with tomcat8 and not with tomcat9 is still not > clear to me, unless there have been some changes between the tomcat8 SPNEGO > Valve and the tomcat9 SPNGEGO Valve, or else maybe in terms of the tomcat > hos

RE: SSO fails on Tomcat 9

2019-09-03 Thread Heidi Leerink - Duverger
cooperation. -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: dinsdag 3 september 2019 20:31 To: users@tomcat.apache.org Subject: Re: SSO fails on Tomcat 9 Heidi, I have the set of test VMs I used when first implementing this feature. They are the ones I used when I wrote

Re: SSO fails on Tomcat 9

2019-09-03 Thread Mark Thomas
time the client and the server) In any case, it may >> >be a good idea if you tested the same access, with a browser on another PC >> workstation. > I test the SSO URL on my own desktop in Google chrome and IE11, but if I test > de URL in IE11 on de nls-decadetest it asks for a

RE: SSO fails on Tomcat 9

2019-09-03 Thread Heidi Leerink - Duverger
m not sure that this type of authentication should work, if the same >machine is at the same time the client and the server) In any case, it may >be >a good idea if you tested the same access, with a browser on another PC >workstation. I test the SSO URL on my own desktop in Google c

Re: SSO fails on Tomcat 9

2019-09-03 Thread tomcat
service is stopped during the Tomcat 9 test. We had the exact same problem when installing in a test environment at one of our Customer sites. Most of our customers that are using SSO with our application are still using Tomcat 8 with no problems and all with the same spnego config. My colleague

RE: SSO fails on Tomcat 9

2019-09-03 Thread Heidi Leerink - Duverger
when installing in a test environment at one of our Customer sites. Most of our customers that are using SSO with our application are still using Tomcat 8 with no problems and all with the same spnego config. My colleague initially set up this Tomcat 9 installation using a few tomcat 9 versions

Re: SSO fails on Tomcat 9

2019-09-03 Thread tomcat
Hello Heidi. Thank you for the complete information provided in your post below. I do not have any experience with the Tomcat SPNEGO Valve per se, but quite a bit of experience with Windows Integrated Authentication. To me, the symptoms that you describe below, do not really look like a problem

SSO fails on Tomcat 9

2019-09-02 Thread Heidi Leerink - Duverger
We have the following problem with connecting from the tomcat environment 9.024 with the Active Directory of Windows, Kerberos database. (win2008 DC's) In Tomcat's log files, with Tomcat8, which gives no problems, it is connected to the Active directory. It indicates that a login attempt is made

Re: HTTPD pass off delegation credentials to Apache Tomcat 8.5.23 for SSO Kerberos

2018-09-20 Thread tomcat
or the second part, the easiest way is to use the AJP-protocol proxying between Apache httpd and Tomcat, as indicated in a previous message to the list. On Wed, Sep 19, 2018 at 7:57 AM André Warnier (tomcat) wrote: On 18.09.2018 23:24, Thomas Delaney wrote: Hello All, I have recentl

Re: HTTPD pass off delegation credentials to Apache Tomcat 8.5.23 for SSO Kerberos

2018-09-20 Thread Thomas Delaney
on at the Apache httpd front-end > level, so that the > front-end authenticates the user, *before* proxying the requests to the > back-end Tomcat > - then configure the front-end to pass along this by now authenticated > user-id, in the > requests that it passes to Tomcat > - and configure Tomcat

Re: HTTPD pass off delegation credentials to Apache Tomcat 8.5.23 for SSO Kerberos

2018-09-19 Thread tomcat
ttpd and Tomcat, as indicated in a previous message to the list. On Wed, Sep 19, 2018 at 7:57 AM André Warnier (tomcat) wrote: On 18.09.2018 23:24, Thomas Delaney wrote: Hello All, I have recently configured Apache Tomcat on a SuSe Enterprise 12 SP3 server to get Kerberos SSO working

Re: HTTPD pass off delegation credentials to Apache Tomcat 8.5.23 for SSO Kerberos

2018-09-19 Thread Thomas Delaney
18.09.2018 23:24, Thomas Delaney wrote: > > Hello All, > > > > I have recently configured Apache Tomcat on a SuSe Enterprise 12 SP3 > server > > to get Kerberos SSO working with a web client application. I have also in > > addition configured Apache HTTPD 2.4.29 on the sam

Re: HTTPD pass off delegation credentials to Apache Tomcat 8.5.23 for SSO Kerberos

2018-09-19 Thread tomcat
On 19.09.2018 13:57, André Warnier (tomcat) wrote: On 18.09.2018 23:24, Thomas Delaney wrote: Hello All, I have recently configured Apache Tomcat on a SuSe Enterprise 12 SP3 server to get Kerberos SSO working with a web client application. I have also in addition configured Apache HTTPD 2.4.29

Re: HTTPD pass off delegation credentials to Apache Tomcat 8.5.23 for SSO Kerberos

2018-09-19 Thread tomcat
On 18.09.2018 23:24, Thomas Delaney wrote: Hello All, I have recently configured Apache Tomcat on a SuSe Enterprise 12 SP3 server to get Kerberos SSO working with a web client application. I have also in addition configured Apache HTTPD 2.4.29 on the same machine.When I reach that website I am

HTTPD pass off delegation credentials to Apache Tomcat 8.5.23 for SSO Kerberos

2018-09-18 Thread Thomas Delaney
Hello All, I have recently configured Apache Tomcat on a SuSe Enterprise 12 SP3 server to get Kerberos SSO working with a web client application. I have also in addition configured Apache HTTPD 2.4.29 on the same machine.When I reach that website I am failing to get SSO working. The web server is

SSO/AD Authentication

2018-07-03 Thread Eric Robinson
We have users in AD domain “Billing” who need to run a tomcat application from a server that is in domain “BackOffice.” Is it possible for a user in the Billing domain to login to the tomcat application in the BackOffice domain without having to re-authenticate? --Eric

SSO using Reverse Proxy from IIS to Apache Tomcat 8.0.22 (Use Windows Authentication NTLM)

2018-05-15 Thread Agrawal, Suraj (CORP)
Hi Team, We are trying to do implement SSO using windows integrated authentication (NTLM) on Apache Tomcat 8.0.22 for Rest API calls. We are following "Windows Authentication How To" --> Reverse Proxies --> Microsoft IIS. We configured ISAPI_Redirect.dll for reverse proxy.

RE: SAML SSO (Service Provider) Configurations on Tomcat Server

2016-01-27 Thread Mohammed Soukath Ali
-Original Message- From: Mader, Michael [mailto:michael.ma...@tyson.com] Sent: Wednesday, January 27, 2016 6:55 PM To: users@tomcat.apache.org Subject: RE: SAML SSO (Service Provider) Configurations on Tomcat Server -Original Message- From: Mohammed Soukath Ali [mailto:mohammedsou

RE: SAML SSO (Service Provider) Configurations on Tomcat Server

2016-01-27 Thread Mader, Michael
-Original Message- From: Mohammed Soukath Ali [mailto:mohammedsou...@vmware.com] Sent: Wednesday, January 27, 2016 2:50 AM To: users@tomcat.apache.org Subject: SAML SSO (Service Provider) Configurations on Tomcat Server Hi Team, We are planning to implement SAML in our Tomcat server

SAML SSO (Service Provider) Configurations on Tomcat Server

2016-01-27 Thread Mohammed Soukath Ali
Hi Team, We are planning to implement SAML in our Tomcat server. Please provide us useful links for SAML Configuration. We will be using Tomcat server as a service provider. Please find the details of the Tomcat Server version which we are using. Server version: Apache Tomcat/7.0.32 Server bui

SAML SSO (Service Provider) Configurations on Tomcat Server

2016-01-27 Thread Mohammed Soukath Ali
Hi Team, We are planning to implement SAML in our Tomcat server. Please provide us useful links for SAML Configuration. We will be using Tomcat server as a service provider. Please find the details of the Tomcat Server version which we are using. [cid:image001.png@01D1590D.71FA21C0] Thanks, S

SSO session expiration

2015-11-19 Thread Kraev, Dmitry
I`m working on migration from tomcat 6 to tomcat 8. On tomcat 8 the following warning occurs when the session is expired or the user signed out: WARN [org.apache.catalina.core.ContainerBase.[Catalina].[localhost]] SSO unable to expire session [Host: [localhost], Context: [/appName], SessionID

Re: sso integration with tomcat

2014-07-07 Thread Mark Thomas
gt; we are using centos 5.4 > > We are currently testing with josso. (if you know something better please > let me know) Don't know if it is better, but quite a few of the SSO deployments I have come across have used CAS: http://www.jasig.org/cas You might want to try the JOSSO sup

sso integration with tomcat

2014-07-07 Thread Randeep
Hi all, We are trying to implement a single sign on tool with our website. Our architecture is as follows. httpd 2.2 (front end) + mod_jk + apache_tomcat 7.0.53 (back end) we have 5 web applications in the webapps we are using centos 5.4 We are currently testing with josso. (if you know somethi

Re: Apache Tomcat Version 6.0.39 , config SSO on Linux machine (SUSE 11.3 )

2014-03-23 Thread André Warnier
Brosh, Yossi wrote: Hi to all , I am trying to install SSO on Linux machine (SUSE 11.3 )with Apache Tomcat Version 6.0.39 in order to working with Jenkins without the needed to login, any idea ? Yos, Better. At least now you are giving some versions.. There is hope. But still : http

Re: SSO

2014-03-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Brosh, On 3/23/14, 3:37 AM, Brosh, Yossi wrote: > I am trying to install SSO on Linux machine with Tomcat in order > to working with Jenkins without the needed to login, any idea ? Lots of ideas. What have you tried so far? - -chris

RE: SSO

2014-03-23 Thread Martin Gainty
When you say Linux I assume you are implementing "Red Hat Enterprise Linux SSO" https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/5/html/Deployment_Guide/sso-ov.html Martin __ Please do not alter or disrupt

Apache Tomcat Version 6.0.39 , config SSO on Linux machine (SUSE 11.3 )

2014-03-23 Thread Brosh, Yossi
Hi to all , I am trying to install SSO on Linux machine (SUSE 11.3 )with Apache Tomcat Version 6.0.39 in order to working with Jenkins without the needed to login, any idea ? Thanks a lot , Yos

Re: SSO

2014-03-23 Thread André Warnier
Brosh, Yossi wrote: Hi to all , I am trying to install SSO on Linux machine with Tomcat in order to working with Jenkins without the needed to login, any idea ? http://www.catb.org/esr/faqs/smart-questions.html ? - To

SSO

2014-03-23 Thread Brosh, Yossi
Hi to all , I am trying to install SSO on Linux machine with Tomcat in order to working with Jenkins without the needed to login, any idea ? Thanks a lot , Yos

Re: Tomcat 7.0.30 CMA, clustering, and SSO

2012-10-26 Thread Josh Gooding
synchronization and I can > see the sessions in the Tomcat Manager. > > When I "kill -9" one of the tomcats, I'm automatically swapped to the other > leg, and I'm still logged in. So it "works", unless I do a catalina.sh > shutdown. In that case, the

Tomcat 7.0.30 CMA, clustering, and SSO

2012-10-25 Thread Scott Carlson
he tomcats, I'm automatically swapped to the other leg, and I'm still logged in. So it "works", unless I do a catalina.sh shutdown. In that case, the SSO session is expired from the other leg. The HTTPSession is still there, but because the SSO session is expired, I'm f

Cluster and SSO

2012-05-14 Thread Riccardo Venittelli
Hello to all, i'm using apache tomcat 7.0.25 with cluster configuration, apache server 2.2 for load balancing and SSO (tomcat) for authentication. With SimpleTcpCluster, DeltaManager and ClusterSingleSignOn configuration all works fine but if i use BackupManger SSO authentication fail. I a

Re: About SSO between Apache2 and Tomcat...

2011-08-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 To whom it may concern, On 8/21/2011 7:30 AM, pushme wrote: > Here's what i'd like to do: 1. User authenticates against Joomla > (running on Apache). For those playing along at home, Joomla is PHP-based. Pushme, how does Joomla perform it's authentic

About SSO between Apache2 and Tomcat...

2011-08-21 Thread pushme
sage in context: http://old.nabble.com/About-SSO-between-Apache2-and-Tomcat...-tp32305140p32305140.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org

Re: Get SSO ID on server

2011-08-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chema, On 8/16/2011 4:33 AM, Chema wrote: >> How do you accomplish that? By doing this SSO >> sniff-and-kill-session thing? It seems more straightforward to >> expire a particular webapp's session explicitly and let the SSO

Re: Get SSO ID on server

2011-08-16 Thread Chema
> How do you accomplish that? By doing this SSO sniff-and-kill-session > thing? It seems more straightforward to expire a particular webapp's > session explicitly and let the SSO expire along with it. > Doesn't that mean you'll have to re-run the same query just to e

Re: Get SSO ID on server

2011-08-15 Thread Christopher Schultz
strator can expulse > an user. It's a client requirement. How do you accomplish that? By doing this SSO sniff-and-kill-session thing? It seems more straightforward to expire a particular webapp's session explicitly and let the SSO expire along with it. > So, I need to record all

Re: Get SSO ID on server

2011-08-12 Thread Chema
ess a protected resource in any application > will require the user to authenticate himself or herself again. > " Right. But the application requires than an administrator can expulse an user. It's a client requirement. So, I need to record all "SSO sessions" FYI, I mad

Re: Get SSO ID on server

2011-08-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chema, On 8/12/2011 3:51 AM, Chema wrote: >> Why do you need a consistent ID between the two apps? > > Because I'll store this ID into a record in database. The apps > checking every 60 sec if this record exists and, if dont , perform a > logout Why

Re: Get SSO ID on server

2011-08-12 Thread Chema
> Why do you need a consistent ID between the two apps? Because I'll store this ID into a record in database. The apps checking every 60 sec if this record exists and, if dont , perform a logout - To unsubscribe, e-mail: users-un

Re: Get SSO ID on server

2011-08-12 Thread Pid
On 11/08/2011 22:31, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Chema, > > On 8/11/2011 5:00 PM, Chema wrote: >> How I can get SSO ID on a servlet? > > Get the cookie value for JSESSIONIDSSO. > >> I want to know th

Re: Get SSO ID on server

2011-08-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chema, On 8/11/2011 5:00 PM, Chema wrote: > How I can get SSO ID on a servlet? Get the cookie value for JSESSIONIDSSO. > I want to know this ID without browser sends a cookie to server. Browser cookies are a requirement to use Tomcat's

Get SSO ID on server

2011-08-11 Thread Chema
Hi: I've configurated my server.xml with and I've got deployed two web applications with Realm authentication How I can get SSO ID on a servlet ? I want to know this ID without browser sends a cookie to server. I don't need this SSO ID be equal to JSESSIONIDSSO . I only wan

RE: reverse proxy with SSO using CAS.

2011-04-17 Thread Jorge Infante Osorio
Hi Mark. -Mensaje original- De: Mark Thomas [mailto:ma...@apache.org] Enviado el: martes, 05 de abril de 2011 6:08 Para: Tomcat Users List Asunto: Re: reverse proxy with SSO using CAS. On 04/04/2011 22:28, Jorge Infante Osorio wrote: > Hi Mark. > > -Mensaje original-

Re: reverse proxy with SSO using CAS.

2011-04-05 Thread Mark Thomas
On 04/04/2011 22:28, Jorge Infante Osorio wrote: > Hi Mark. > > -Mensaje original- > De: Mark Thomas [mailto:ma...@apache.org] > Enviado el: viernes, 25 de marzo de 2011 12:57 > Para: Tomcat Users List > Asunto: Re: reverse proxy with SSO using CAS. > >

RE: reverse proxy with SSO using CAS.

2011-04-04 Thread Jorge Infante Osorio
Hi Mark. -Mensaje original- De: Mark Thomas [mailto:ma...@apache.org] Enviado el: viernes, 25 de marzo de 2011 12:57 Para: Tomcat Users List Asunto: Re: reverse proxy with SSO using CAS. On 25/03/2011 16:35, Jorge Infante Osorio wrote: > I have an issue in reverse proxy with apa

Re: reverse proxy with SSO using CAS.

2011-03-25 Thread André Warnier
Jorge Infante Osorio wrote: -Mensaje original- De: André Warnier [mailto:a...@ice-sa.com] Enviado el: viernes, 25 de marzo de 2011 13:09 Para: Tomcat Users List Asunto: Re: reverse proxy with SSO using CAS. Jorge Infante Osorio wrote: I have an issue in reverse proxy with apache

RE: reverse proxy with SSO using CAS.

2011-03-25 Thread Jorge Infante Osorio
-Mensaje original- De: André Warnier [mailto:a...@ice-sa.com] Enviado el: viernes, 25 de marzo de 2011 13:09 Para: Tomcat Users List Asunto: Re: reverse proxy with SSO using CAS. Jorge Infante Osorio wrote: > I have an issue in reverse proxy with apache, tomcat and SSO using

Re: reverse proxy with SSO using CAS.

2011-03-25 Thread André Warnier
Jorge Infante Osorio wrote: I have an issue in reverse proxy with apache, tomcat and SSO using CAS. The problem is that my reverse proxy work just fine when I use an Apache Server as the reverse proxy with two back-end tomcats. But when the I include SSO with CAS to authenticate the user

  1   2   3   >