I'll try to avoid the hack method if possible.

Let me clarify the two requirements that my authentication process must
meet. It must use an existing stored procedure that will return a login
success/fail response, and it needs additional credentials (username,
password, and at least one other field, if not more.)

Which of the two suggestions should I be looking at? (JAASRealm or
FormAuthenticator?) I can't tell the conceptual difference between these
classes, and which can solve my problem.

Also, is it correct to say that both suggestions are Tomcat-specific?
(Realms and FormAuthenticator.)

Thanks.



Gregor Schneider wrote:
> 
> in $CATALINA_HOME/server/lib/catalina.jar there's a file
> "catalina.properties".
> There your will find the following entries:
> 
> BASIC=org.apache.catalina.authenticator.BasicAuthenticator
> CLIENT-CERT=org.apache.catalina.authenticator.SSLAuthenticator
> DIGEST=org.apache.catalina.authenticator.DigestAuthenticator
> FORM=org.apache.catalina.authenticator.FormAuthenticator
> NONE=org.apache.catalina.authenticator.NonLoginAuthenticator
> 
> Replace either Basic or FormAuthenticator with your own, put your jar
> into "$CATALINA_HOME/server/lib, restart -> voilá
> 
> had to do that once, however, it's a bad hack....
> 
> On 5/24/07, lightbulb432 <[EMAIL PROTECTED]> wrote:
> 
>> implementation. Could somebody describe the difference between your
>> suggestion and implementing Realm? Are they mutually exclusive concepts?
>> Are
>> they unrelated to each other completely?
>>
> http://tomcat.apache.org/tomcat-5.5-doc/realm-howto.html#JAASRealm
> 
> That would be a better solution, though, however, I'm not sure if that
> could work with the architecture you described in your former post.
> 
> cheers
> 
> gregor
> -- 
> what's puzzlin' you, is the nature of my game
> gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2
> gpgp-key available @ http://pgpkeys.pca.dfn.de:11371
> 
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 
> 

-- 
View this message in context: 
http://www.nabble.com/Single-sign-on-without-form-based-authentication-tf3805975.html#a10787517
Sent from the Tomcat - User mailing list archive at Nabble.com.


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to