On 26/08/2016 06:54, Doug Gschwind wrote:
> Hello,

<snip/>

> In my research today on the topic, this appears to be much more difficult
> than I would expect in Tomcat 8.5, so I can only conclude I am missing
> something. Here are the two potential solutions I have found :
> 
> 1) Provide our own implementation of the org.apache.catalina.Realm

The split isn't completely clean but generally Realm's provide
authorization, not authentication.

Very roughly, Authenticators obtain the user name, password etc and
Realms validate them against a credential store.

You probably want to implement a custom Authenticator (extending
AuthenticatorBase).

Depending on what you are trying to do, you might need a custom
Authenticator and a custom Realm.

A more portable solution would be to implement a JASPIC module.

HTH,

Mark


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to