eborisow wrote:
Gabe Wong wrote:
Since the hasRole is being called, can you not do a super.hasRole against the stripped user name of the Principal.
If so won't that suffice?


Gabe,

Yeah, I was thinking that.  The hasRole though takes two parameters... a
Principal and the role name.  I could not find any easy way to manipulate
the existing object name.  I also looked into creating a GenericPrincipal,
but that requires a password parameter.  The one thing I haven't tried is
'fudging' it by passing a user name and password that I know exists and see
if that works.  Although, that won't help me in the future when I don't know
the password.

Short of hacking Tomcat, another possibility, is if you can access the LDAP data - perhaps a thread that populates a Database with the names with the group. Then check the data as the hasRole method is called.


--
Regards

Gabe Wong
NGASI AppServer Manager
JAVA AUTOMATION and SaaS Enablement
<a href=http://www.ngasi.com>http://www.ngasi.com</a>
NEW! 8.0 - Centrally manage multiple physical servers


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to