RE: Tomcat Built-in WinAuth - NEW THREAD

2013-03-06 Thread Chris Fors
Read the spec. Especially Ch 13. Sent from my Windows Phone From: Mark Thomas Sent: 05/03/2013 19:18 To: Tomcat Users List Subject: Re: Tomcat Built-in WinAuth - NEW THREAD On 05/03/2013 16:31, Chris Fors wrote: > I wish to allow any authenticated domain u

RE: Tomcat Built-in WinAuth - NEW THREAD

2013-03-06 Thread Chris Fors
: Tomcat Users List Subject: Re: Tomcat Built-in WinAuth - NEW THREAD Hi. Your message appears quite garbled in my email client. Some notes in the text below, which I have reformated somewhat. Chris Fors wrote: > I have added in a to the sample application web.xml > (shown below) and modifi

Re: Tomcat Built-in WinAuth - NEW THREAD

2013-03-05 Thread André Warnier
Hi. Your message appears quite garbled in my email client. Some notes in the text below, which I have reformated somewhat. Chris Fors wrote: I have added in a to the sample application web.xml (shown below) and modified the hello.jsp to show a request.getRemoteUser(). This has shown to s

Re: Tomcat Built-in WinAuth - NEW THREAD

2013-03-05 Thread Mark Thomas
On 05/03/2013 16:31, Chris Fors wrote: > I wish to allow any authenticated domain user There is pure web.xml (until Tomcat 8 and Servlet 3.1) way of doing this. (Aside. Once this has been implemented, we should look at back-porting the new ** feature to earlier versions). > role-name>* That does

RE: Tomcat Built-in WinAuth - NEW THREAD

2013-03-05 Thread Chris Fors
e: Mon, 4 Mar 2013 18:48:24 -0600 > From: ch...@christopherschultz.net > To: users@tomcat.apache.org > Subject: Re: Tomcat Built-in WinAuth - NEW THREAD > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Chris, > > On 3/4/13 4:54 PM, Chris Fors wrote: > &

Re: Tomcat Built-in WinAuth - NEW THREAD

2013-03-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chris, On 3/4/13 4:54 PM, Chris Fors wrote: >> Date: Mon, 4 Mar 2013 23:32:34 +0100 From: a...@ice-sa.com To: >> users@tomcat.apache.org Subject: Re: Tomcat Built-in WinAuth - >> NEW THREAD >> >> Mark Thomas wrote:

RE: Tomcat Built-in WinAuth - NEW THREAD

2013-03-04 Thread Chris Fors
> Date: Mon, 4 Mar 2013 23:32:34 +0100 > From: a...@ice-sa.com > To: users@tomcat.apache.org > Subject: Re: Tomcat Built-in WinAuth - NEW THREAD > > Mark Thomas wrote: > > On 04/03/2013 21:47, Chris Fors wrote: > >> Could you please expand on what

Re: Tomcat Built-in WinAuth - NEW THREAD

2013-03-04 Thread André Warnier
Mark Thomas wrote: On 04/03/2013 21:47, Chris Fors wrote: Could you please expand on what constraints you were referring to Security constraints in web.xml and how they are best implemented, where, and in what syntax e.g. if implemented in web.xml what are the correct tags. All defined in

Re: Tomcat Built-in WinAuth - NEW THREAD

2013-03-04 Thread Mark Thomas
On 04/03/2013 21:47, Chris Fors wrote: > Could you please expand on what constraints you were referring to Security constraints in web.xml > and how they are best implemented, where, and in what syntax e.g. if > implemented in web.xml what are the correct tags. All defined in the Servlet spec.

Tomcat Built-in WinAuth - NEW THREAD

2013-03-04 Thread Chris Fors
-Original Message- From: Mark Thomas Sent: Monday, March 04, 2013 8:59 PM To: Tomcat Users List Subject: Re: Tomcat Built-in WinAuth On 04/03/2013 20:44, Chris Fors wrote: > I've yet to see success with SPNEGO Windows Authentication. I've > followed the documenta

Re: Tomcat Built-in WinAuth

2013-03-04 Thread Mark Thomas
On 04/03/2013 20:44, Chris Fors wrote: > I've yet to see success with SPNEGO Windows Authentication. I've > followed the documentation as close as possible, although it is incomplete. > > After creating the SpnegoAuthenticator valve in the conf context.xml, > should that enable SPNEGO for all web

Tomcat Built-in WinAuth

2013-03-04 Thread Chris Fors
I've yet to see success with SPNEGO Windows Authentication. I've followed the documentation as close as possible, although it is incomplete. After creating the SpnegoAuthenticator valve in the conf context.xml, should that enable SPNEGO for all web sessions? If not what must be specified in