Hi,

I have Tomcat users in an LDAP directoy. All users have the same
rights, there are no groups. I have no influence over the LDAP
servers' content.
Tomcat uses the JNDI realm.

Now, I need an additional, technical, user for Tomcat, that should be
allowed to restart/redeploy web apps.Everybody shouldn't be allowed to
do this.

apache-tomcat-6.0.14\conf\tomcat-users.xml would contain a nice user
"tomcat" in the manager role.

So, if user tomcat logs in, JNDI realm should say "User unknown" and
afterwards memory realm should say "fine, user is allowed".

Unfortunately, Tomcat can only use one active realm. Is that right?

Is there any other way to get the manager user into Tomcat?

Setting up OpenLdap as Meta Directory before our LDAP server and
putting the "tomcat" user into OpenLDAP seems a bit overblown.

Thanks,
Juergen

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to