tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Costin Manolache <>
Subject Re: default JAAS realm for StandardEngine
Date Mon, 07 Apr 2003 06:19:42 GMT
Amy Roh wrote:

> What's the background for StandardEngine returning JAAS realm by default
> when its realm is null?

It was discussed few times. This is only the default - it should be possible
to override it ( if not - it's a bug ).

The rationale is simple - JAAS is the standard for authentication in java:-)
And since other systems use JAAS, it would be easier to integrate and to
develop auth modules. 

I don't know if we'll get to refactor the database and LDAP module to 
JAAS login modules - that would make them useable in other apps, but 
it will be a bit harder to configure.

The config for JAAS may be a bit tricky - if you want to try it,
I used: 

Tomcat-Standalone {
    org.apache.catalina.realm.JAASMemoryLoginModule Required
in ~/.java.login.config


To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message