Return-Path: <roytmana@peacetech.com>
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Received: (qmail 40376 invoked from network); 24 Sep 2000 18:11:38 -0000
Received: from pt73.peacetech.com (HELO ptint3.peacetech.com) (207.176.93.73)
  by locus.apache.org with SMTP; 24 Sep 2000 18:11:38 -0000
Received: by pt73.peacetech.com with Internet Mail Service (5.5.2650.21)
	id <RDXQZ99D>; Sun, 24 Sep 2000 14:11:34 -0400
Message-ID: <511F5E23FD70D111BA840060083424E5B6DCE9@pt73.peacetech.com>
From: "Roytman, Alex" <roytmana@peacetech.com>
To: "'tomcat-user@jakarta.apache.org'" <tomcat-user@jakarta.apache.org>
Cc: "'svevor@home.com'" <svevor@home.com>
Subject: RE: AccessInterceptor vs. SecurityCheck
Date: Sun, 24 Sep 2000 14:11:26 -0400
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2650.21)
Content-Type: text/plain;
	charset="iso-8859-1"
X-Spam-Rating: locus.apache.org 1.6.2 0/1000/N

Hi Slava,

Is there any reason to use LDAP directly rather than through JNDI for
authentication?
What is your opinion?

Alex

-----Original Message-----
From: Slava Voronin [mailto:svevor@home.com]
Sent: Saturday, September 23, 2000 8:58 PM
To: tomcat-user@jakarta.apache.org
Subject: Re: AccessInterceptor vs. SecurityCheck


"Haller, Joe" wrote:

> I am trying to implement Mr. Mark Wilcox's LDAP authenticator (as
described
> in "Professional JSP", Chap. 15) under Tomcat 3.2b4.
>
> Mr. Wilcox's class "com.mjwilcox.ldapAuthCheck" extends
> "org.apache.tomcat.request.SecurityCheck".  It then replaces SecurityCheck
> is the TOMCAT_HOME/conf/server.xml file as follows:
>
> <!-- <RequestInterceptor
className="org.apache.tomcat.request.SecurityCheck"
> /> -->
> <RequestInterceptor className="com.mjwilcox.ldapAuthCheck" />
>
> Looking at the Tomcat 3.2b4 distribution, I see that SecurityCheck does
not
> appear
> in the webserver.jar file or in server.xml.  There is a class
> "org.apache.tomcat.request.AccessInterceptor" that appears in both places.
>
> Does AccessInterceptor supercede SecurityCheck in Tomcat 3.2b4?
>

 I did the same authentication.
 Change code as
public class ldapAuthCheck extends
org.apache.tomcat.request.AccessInterceptor
 in ldapAuthCheck .
When compiled  I get some errors.
I get help from this list ( to add
at the top of source file)
import javax.naming.directory.Attributes;
 In my case it helped me.
Otherwise everything work  fine with tomcat 3.2b4
apache , linux.  openldap1.2. jdk1.3 (from sun)

Now  I upgraded to openldap2.
Still have some minor problem, but I think it is  openldap2.
Slava.