So I have SPNEGO working and I want to use the JNDI realm for authorisation.

I have this configured :-

      <Realm className="org.apache.catalina.realm.JNDIRealm"
          connectionURL="ldap://win-dc01.kerbtest.local:389";
          userBase="ou=Users,dc=kerbtest,dc=local"
          userSearch="(uid={0})" 
          userRoleName="memberOf"
          roleBase="ou=Users,dc=kerbtest,dc=local"
          roleName="cn"
          roleSearch="(uniqueMember={0})"/>

I would like to use AD groups to control authorisation in my application.

However currently it appears the tomcat-users is being used :-

  <user username="test" password="testpass" roles="manager-gui"/>

How do I configure tomcat Manager web app to use the realm and ignore the users 
file ?

Alternatively is there other example code I can use with the JNDI realm ?

many thanks

David                                     
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to