Hi Oliver,
I don't think there is a HTTP Basic authentication realm. The authentication type is
declared in the <auth-method> of your web.xml and can be used in conjunction
with a number of different realm implementations.
Exactly what do you mean by re-use? Does this mean you are doing authentication
from within your web app?
My application is exposing a SOAP service (through Spring-WS servlet)
for which I want to do method-level access control. Since the service
endpoint already uses container-based HTTP Basic authentication, I'd
like to reuse the realm implementation (and configuration, obviously) in
my own code to get hold of the user's roles.
I just found HttpServletRequest#getUserPrincipal() , maybe I can just
downcast the result to org.apache.catalina.realm.GenericPrincipal and
invoke getRoles() on this... ugly, but well... ;)
Cheers,
Tobi
Oliver
-----Original Message-----
From: users-return-242237-OLIVER.TANGLIN=saic....@tomcat.apache.org on behalf
of Tobias Gierke
Sent: Tue 6/11/2013 11:20 AM
To: users@tomcat.apache.org
Subject: Possible to expose a Tomcat Realm instance through JNDI ?
Hi,
In my web app, I'd like to re-use the (server-wide) Tomcat Realm that is
already being used for HTTP Basic authentication but couldn't find a way
how to get hold of the actual Realm instance.
I spent quite some time looking for a solution (complicated by the fact
that most Google hits actually referred to the LDAP authentication
realm) but found none. Is there a "config-file-only" solution or do I
need to dig into the Tomcat source code and come up with my own JNDI
ObjectFactory to achieve this ?
Cheers,
Tobias
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
--
Tobias Gierke
Development
VOIPFUTURE GmbH Wendenstraße 4 20097 Hamburg, Germany
Phone +49 40 688 900 111 Mobile +49 172 323 06 11 Fax +49 40 688 900 199
Email jan.bast...@voipfuture.com Web http://www.voipfuture.com
CEO Jan Bastian
Commercial Court AG Hamburg HRB 109896, VAT ID DE263738086
