tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject [Bug 54141] New: Configuration does not allow Realms to be nested more than 2 levels deep
Date Tue, 13 Nov 2012 01:55:35 GMT
https://issues.apache.org/bugzilla/show_bug.cgi?id=54141

          Priority: P2
            Bug ID: 54141
          Assignee: dev@tomcat.apache.org
           Summary: Configuration does not allow Realms to be nested more
                    than 2 levels deep
          Severity: normal
    Classification: Unclassified
                OS: Mac OS X 10.4
          Reporter: chris@christopherschultz.net
          Hardware: PC
            Status: NEW
           Version: 7.0.32
         Component: Catalina
           Product: Tomcat 7

The use case is to have one Realm that is configured for lock-out with another
that is not: the two should be combined together.

The obvious configuration attempt is this:

<CombinedRealm>
  <LockoutRealm>
     <DataSourceRealm/>
  </LockoutRealm>
  <UserDatabaseRealm/>
</CombinedRealm>

Unfortunately, this configuration yields an error:

  No rules found matching 'Server/Service/Engine/Realm/Realm/Realm'

org.apache.catalina.startup.RealmRuleSet.addRuleInstances only goes 2 levels
deep when it comes to Realms (that is, only allows "Realm" and "Realm/Realm").
Adding a 3rd level would certainly work here and might be sufficient. Another
option would be to configure the digester to allow arbitrary levels of
Realm-nesting for even the most pathological cases.

For reference, see this link to a question over on StackOverflow:
http://stackoverflow.com/questions/13274696/tomcat-7-nesting-combinedrealm-lockoutrealm-and-datasourcerealm

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message