Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-17 Thread Nikhil
On Wed, Jul 16, 2008 at 8:06 PM, Rainer Jung <[EMAIL PROTECTED]> wrote: > Thanks Rainer. If I want to explicitly pass an environment variable from >> the httpd to the tomcat, I am using the RequestHeader, JkEnvVar, Setenv >> but >> unable to have them as it is passed in the tomcat... how do I go

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Rainer Jung
Thanks Rainer. If I want to explicitly pass an environment variable from the httpd to the tomcat, I am using the RequestHeader, JkEnvVar, Setenv but unable to have them as it is passed in the tomcat... how do I go about that? While I am completely convinced to use getRemoteUser() method only for

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Nikhil
On Wed, Jul 16, 2008 at 3:22 PM, Rainer Jung <[EMAIL PROTECTED]> wrote: > Nikhil schrieb: > > On Wed, Jul 16, 2008 at 2:52 PM, Rainer Jung <[EMAIL PROTECTED]> >> wrote: >> >> To repeat two of my questions: >>> >>> What do you expect to be the value of the 'REMOTE_USER' variable? >>> >>> Do you e

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Nikhil
Thanks for the explanation, Rainer. Fine, I am going with using the method only then... Regards, Nikhil On Wed, Jul 16, 2008 at 3:22 PM, Rainer Jung <[EMAIL PROTECTED]> wrote: > Nikhil schrieb: > > On Wed, Jul 16, 2008 at 2:52 PM, Rainer Jung <[EMAIL PROTECTED]> >> wrote: >> >> To repeat two of

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Rainer Jung
Nikhil schrieb: On Wed, Jul 16, 2008 at 2:52 PM, Rainer Jung <[EMAIL PROTECTED]> wrote: To repeat two of my questions: What do you expect to be the value of the 'REMOTE_USER' variable? Do you expect something else, than what you get from request.getRemoteUser()? After I understand that, we c

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Nikhil
I tried using both getAttribute methods and getHeaderNames/getHeaders methods but unfortunately the variables are set to null On Wed, Jul 16, 2008 at 2:01 PM, André Warnier <[EMAIL PROTECTED]> wrote: > Nikhil wrote: > >> On Tue, Jul 15, 2008 at 6:35 PM, Rainer Jung <[EMAIL PROTECTED]> >> wrote: >

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Nikhil
On Wed, Jul 16, 2008 at 2:52 PM, Rainer Jung <[EMAIL PROTECTED]> wrote: > > To repeat two of my questions: > > What do you expect to be the value of the 'REMOTE_USER' variable? > > Do you expect something else, than what you get from > request.getRemoteUser()? > > After I understand that, we can f

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread Rainer Jung
Nikhil schrieb: On Tue, Jul 15, 2008 at 6:35 PM, Rainer Jung <[EMAIL PROTECTED]> wrote: What do you expect to be the value of the 'REMOTE_USER' variable? Do you expoect something else, than what you get from request.getRemoteUser()? What do you mean by variable? Maybe an httpd environment Varia

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-16 Thread André Warnier
Nikhil wrote: On Tue, Jul 15, 2008 at 6:35 PM, Rainer Jung <[EMAIL PROTECTED]> wrote: What do you expect to be the value of the 'REMOTE_USER' variable? Do you expoect something else, than what you get from request.getRemoteUser()? What do you mean by variable? Maybe an httpd environment Variabl

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-15 Thread Nikhil
On Tue, Jul 15, 2008 at 6:35 PM, Rainer Jung <[EMAIL PROTECTED]> wrote: What do you expect to be the value of the 'REMOTE_USER' variable? Do you > expoect something else, than what you get from request.getRemoteUser()? What > do you mean by variable? Maybe an httpd environment Variable? > > Precis

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-15 Thread Rainer Jung
Thats right and clueful. Yes, I modifued my httpd.conf to include the webapp location that I was going through and it updated the remote user, I was able to use have the result now properly set from the request.getRemoteUser call. Fine. BUT, again, I was not able to pass the 'REMOTE_USER' vari

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-15 Thread Nikhil
On Tue, Jul 15, 2008 at 2:23 PM, Rainer Jung <[EMAIL PROTECTED]> wrote: > Nikhil schrieb: > >> [Tue Jul 15 12:57:40 2008] [20026:0001] [debug] mod_jk.c (607): Service >> protocol=HTTP/1.1 method=GET host=(null) addr=149.77.175.155 name= >> is3.hyd.deshaw.com port=8080 auth=(null) user=(null) >> la

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-15 Thread Rainer Jung
Nikhil schrieb: [Tue Jul 15 12:57:40 2008] [20026:0001] [debug] mod_jk.c (607): Service protocol=HTTP/1.1 method=GET host=(null) addr=149.77.175.155 name= is3.hyd.deshaw.com port=8080 auth=(null) user=(null) laddr=149.77.160.20raddr= 149.77.175.155 -- If noticed, auth=(null) and use

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-15 Thread Nikhil
While I am at it, I found this interesting information from the jk_logs: [Tue Jul 15 12:57:40 2008] [20026:0001] [debug] jk_uri_worker_map.c (589): Attempting to map URI '/examples/jsp/rheaders.jsp' from 0 maps [Tue Jul 15 12:57:40 2008] [20026:0001] [debug] jk_uri_

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-15 Thread Nikhil
I am still not able to get this straight. Looking at the server.xml tells me there is a userDatabase resource that is looked which I may need to comment? Could you please confirm? I am posting my server.xml (tomcat-6.0.16) for thoroughness so I do not miss any points here : Please let me know if I

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Nikhil
On Mon, Jul 14, 2008 at 7:46 PM, Rainer Jung <[EMAIL PROTECTED]> wrote: > Use request.getRemoteUser() > > HTH > > > Rainer > Thanks Rainer. I am now using Tomcat6(latest stable release) and configured the server.xml with ajp connector to use tomcatAuthentication=false and I am still getting th

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Nikhil
I tried out Tomcat6 too and added 'tomcatAuthentication="false"' to the ajp connector but that still not work. :-( On Mon, Jul 14, 2008 at 7:15 PM, Nikhil <[EMAIL PROTECTED]> wrote: > Rainer, > I seem to have found a related link on this but this is really old > pertaining to the older version

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Rainer Jung
Nikhil wrote: OK After editing the change in the ajp connector, and restarting the tomcat, I still am not able to get the remote_user variable passed. Any suggestions? (Although I am still to try out the Tomcat6, but would prefer for fixing the existing installation unless ther

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Nikhil
Rainer, I seem to have found a related link on this but this is really old pertaining to the older versions of Tomcat.. any suggestions please. http://marc.info/?t=10431829842&r=1&w=2

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Nikhil
On Mon, Jul 14, 2008 at 5:00 PM, Rainer Jung <[EMAIL PROTECTED]> wrote: > > Again, the http connector is *not* what you need to edit, if you want to > combine Tomcat with mod_jk or mod_proxy_ajp. It is the AJP connector. See my > previous mail. > > You need to add tomcatAuthentication="false" to t

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Rainer Jung
Nikhil wrote: On Mon, Jul 14, 2008 at 4:22 PM, Nikhil <[EMAIL PROTECTED]> wrote: On Mon, Jul 14, 2008 at 2:39 PM, Rainer Jung <[EMAIL PROTECTED]> wrote: First of all 5.5.12 is very outdated and also very early in the 5.5 release cycle. You need to add 'tomcatAuthentication="false"' in the

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Nikhil
On Mon, Jul 14, 2008 at 4:22 PM, Nikhil <[EMAIL PROTECTED]> wrote: > > > On Mon, Jul 14, 2008 at 2:39 PM, Rainer Jung <[EMAIL PROTECTED]> > wrote: > >> >>> First of all 5.5.12 is very outdated and also very early in the 5.5 >> release cycle. >> >> You need to add 'tomcatAuthentication="false"' in

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Nikhil
On Mon, Jul 14, 2008 at 2:39 PM, Rainer Jung <[EMAIL PROTECTED]> wrote: > >> First of all 5.5.12 is very outdated and also very early in the 5.5 > release cycle. > > You need to add 'tomcatAuthentication="false"' in the Connector element for > your AJP connector. The connector you showed us above

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-14 Thread Rainer Jung
Nikhil wrote: The remote user gets forwarded automatically, but in order to make Tomcat accept that info and not try to authenticate itself, you need to set tomcatAuthentication="false" in the ajp connector element in server.xml. See also http://tomcat.apache.org/tomcat-6.0-doc/config/ajp.html

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-13 Thread Nikhil
> > > > The remote user gets forwarded automatically, but in order to make Tomcat > accept that info and not try to authenticate itself, you need to set > tomcatAuthentication="false" in the ajp connector element in server.xml. > > See also http://tomcat.apache.org/tomcat-6.0-doc/config/ajp.html >

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-13 Thread Nikhil
> > Not necessarily. You could configure address attribute of the Tomcat HTTP > to listen only on 127.0.0.1 if httpd is on the same system, or > if on a different system, configure Tomcat's RemoteAddrValve to limit > requests to just that system. > > http://tomcat.apache.org/tomcat-6.0-doc/config

Re: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-13 Thread Rainer Jung
Hi Nikhil, Nikhil schrieb: I have no problems in using mod_jk but could not figure out the ways of passing the remote_user variable effectively to the tomcat instance would also desire to have a scalability that with a single httpd instance supporting the multiple tomcat instances (may be on

RE: tomcat, apache with mod_jk and mod_auth_kerb

2008-07-13 Thread Caldarale, Charles R
> From: Nikhil [mailto:[EMAIL PROTECTED] > Subject: tomcat, apache with mod_jk and mod_auth_kerb > > I have earlier tried using the mod_rewrite module > with proxy .. but that would ask me to enable the > http connector port of the tomcat instance and will > prompt to keep

tomcat, apache with mod_jk and mod_auth_kerb

2008-07-13 Thread Nikhil
Hi, I am using httpd v2.0.58 installed on a Solaris-10 system, also have mod_auth_kerb with proper kerberos infrastructure. I am hosting few new applications on tomcat and wanted to integrate with the kerberos but via the httpd as the front end. As in, the httpd will do the front-end kerberos auth