tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Miguel A Paraz <mpa...@mparaz.com>
Subject Specifying X.509 DN's in tomcat-users.xml
Date Mon, 22 Dec 2003 09:50:22 GMT
Hi,
From:
http://www.mail-archive.com/tomcat-user@jakarta.apache.org/msg109699.html

On Tue, 11 Nov 2003, Bill Barker wrote:

> At the moment, only MemoryRealm supports CLIENT-CERT auth (at least from the
> Tomcat ships-with Realms).  There are patches for JNDIRealm and JDBCRealm
> floating around in Bugzilla, that should be fine if you are using Sun's JVM.
> (The Sun dependencies are basically why they are still floating :).
>
> Once you have enabled MemoryRealm (and, for versions < 4.1.29, disable the
> default DataSource), then the 'username' in tomcat-users.xml is the cert's
> DN (aka Subject).  The password can be anything you want (it is ignored for
> CLIENT-CERT auth).

I tried this like:
<user username="/C=PH/ST=NCR/L=Pasig/O=mparaz.com/OU=personal/CN=Miguel A Paraz/emailAddress=mparaz@mparaz.com"
password="ignored" roles="role1"/>

But UserRealm doesn't like it.  I tried URL-escaping the '=' to '%3D' but it
was ignored. Does anyone have a working sample?  Thanks!

SEVERE: Exception creating UserDatabase MBeans for UserDatabase
javax.management.MalformedObjectNameException: Invalid character '=' in value pa
rt of property
        at javax.management.ObjectName.construct(ObjectName.java:563)
        at javax.management.ObjectName.<init>(ObjectName.java:1300)
        at org.apache.catalina.mbeans.MBeanUtils.createObjectName(MBeanUtils.jav
a:1520)
        at org.apache.catalina.mbeans.MBeanUtils.createMBean(MBeanUtils.java:783
)
        at org.apache.catalina.mbeans.GlobalResourcesLifecycleListener.createMBe
ans(GlobalResourcesLifecycleListener.java:280)
        at org.apache.catalina.mbeans.GlobalResourcesLifecycleListener.createMBe
ans(GlobalResourcesLifecycleListener.java:210)
        at org.apache.catalina.mbeans.GlobalResourcesLifecycleListener.createMBe
ans(GlobalResourcesLifecycleListener.java:172)
        at org.apache.catalina.mbeans.GlobalResourcesLifecycleListener.lifecycle
Event(GlobalResourcesLifecycleListener.java:144)
        at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(Lifecycl
eSupport.java:166)
        at org.apache.catalina.core.StandardServer.start(StandardServer.java:233
6)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:581)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:324)
        at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:297)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:398)


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


Mime
View raw message