Re: Two auth methods for one application

2012-02-09 Thread Remon Sadikni
Hi Jan, The servlet spec doesn't support anything like this. I think what you'll have to do is write your own Authenticator. You can configure your own Authenticator by registering a that is an Authenticator in your webapp's. Just write your own code and register it using. I don't know if th

Re: Two auth methods for one application

2012-02-02 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jan, On 2/2/12 11:05 AM, Jan Vávra wrote: > I'm trying to do SSL or Basic auth. This is slightly different: SSL > or Form auth. How I'm thinking about that basic vs. form auth > should be the only one difference. I'll explore this. The code posted on

Re: Two auth methods for one application

2012-02-02 Thread Jan Vávra
On 02/02/2012 15:00, Christopher Schultz wrote: Jan, On 2/2/12 6:26 AM, Jan Vávra wrote: Is it possible to configure tomcat to call both variants of functions? I'd like to write something like CLIENT-CERT or BASIC. The servlet spec doesn't support anything like this. I think what you'll have

Re: Two auth methods for one application

2012-02-02 Thread Pid
On 02/02/2012 15:34, Christopher Schultz wrote: > Pid, > > On 2/2/12 10:28 AM, Pid wrote: >> On 02/02/2012 15:00, Christopher Schultz wrote: >>> Tomcat has a "CombinedRealm" which allows authentication against >>> one of several sub-realms (like LDAP /or/ JDBC), but does not >>> have a CombinedAut

Re: Two auth methods for one application

2012-02-02 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pid, On 2/2/12 10:28 AM, Pid wrote: > On 02/02/2012 15:00, Christopher Schultz wrote: >> Tomcat has a "CombinedRealm" which allows authentication against >> one of several sub-realms (like LDAP /or/ JDBC), but does not >> have a CombinedAuthenticator,

Re: Two auth methods for one application

2012-02-02 Thread Pid
On 02/02/2012 15:00, Christopher Schultz wrote: > Jan, > > On 2/2/12 6:26 AM, Jan Vávra wrote: >> Is it possible to configure tomcat to call both variants of >> functions? I'd like to write something like >> CLIENT-CERT or BASIC. > > The servlet spec doesn't support anything like this. I think wh

Re: Two auth methods for one application

2012-02-02 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jan, On 2/2/12 6:26 AM, Jan Vávra wrote: > Is it possible to configure tomcat to call both variants of > functions? I'd like to write something like > CLIENT-CERT or BASIC. The servlet spec doesn't support anything like this. I think what you'll have

Two auth methods for one application

2012-02-02 Thread Jan Vávra
Hello, I have implemented own realm. I extended RealmBase, overrided methods (1) public Principal authenticate(X509Certificate[] certs), (2) public Principal authenticate(String username, String credentials). I have Tomcat 6 that runs behind Apache Server over AJP. In the situation (1) client c