Re: exclude specific IP address from HTTP auth

2010-02-16 Thread André Warnier
Marcus Better wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Caldarale, Charles R wrote: I'm looking for the Tomcat 6 security configuration that would correspond to Apache httpd's "Satisfy Any". Take a look at SecurityFilter to see if it will do what you want. Thanks, but it says it o

Re: exclude specific IP address from HTTP auth

2010-02-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marcus, On 2/16/2010 3:56 PM, Marcus Better wrote: > Caldarale, Charles R wrote: >>> I'm looking for the Tomcat 6 security configuration that would >>> correspond to Apache httpd's "Satisfy Any". > >> Take a look at SecurityFilter to see if it will d

Re: exclude specific IP address from HTTP auth

2010-02-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marcus, On 2/16/2010 3:56 PM, Marcus Better wrote: > Caldarale, Charles R wrote: >>> I'm looking for the Tomcat 6 security configuration that would >>> correspond to Apache httpd's "Satisfy Any". > >> Take a look at SecurityFilter to see if it will d

RE: exclude specific IP address from HTTP auth

2010-02-16 Thread Caldarale, Charles R
> From: news [mailto:n...@ger.gmane.org] On Behalf Of Marcus Better > Subject: RE: exclude specific IP address from HTTP auth > > but it says it only supports form authentication, not HTTP > Basic or Digest... To quote Chris S: "Note that the warning about BASIC authenticati

RE: exclude specific IP address from HTTP auth

2010-02-16 Thread Marcus Better
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Caldarale, Charles R wrote: >> I'm looking for the Tomcat 6 security configuration that would >> correspond to Apache httpd's "Satisfy Any". > > Take a look at SecurityFilter to see if it will do what you want. Thanks, but it says it only supports fo

RE: exclude specific IP address from HTTP auth

2010-02-16 Thread Caldarale, Charles R
> From: news [mailto:n...@ger.gmane.org] On Behalf Of Marcus Better > Subject: exclude specific IP address from HTTP auth > > I'm looking for the Tomcat 6 security configuration that would > correspond to Apache httpd's "Satisfy Any". Take a look at SecurityF

exclude specific IP address from HTTP auth

2010-02-16 Thread Marcus Better
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I'm looking for the Tomcat 6 security configuration that would correspond to Apache httpd's "Satisfy Any". In other words, use HTTP Digest authentication for a web app, but allow some specific IP address access without authentication. I alread