Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
Received-SPF: pass (hermes.apache.org: local policy)
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Subject: RE: SOLVED! RE: Why request.getRemoteUser() returns NULL ?
Date: Thu, 2 Sep 2004 12:29:05 +0100
Message-ID: <5684A7E6FB10504393A2806C1F4C021003B0E177@orion.qas.com>
Thread-Topic: SOLVED! RE: Why request.getRemoteUser() returns NULL ?
Thread-Index: 
 AcSP8cr1xYbDjAHaS66VTFuUY0ctrgACo0VwAAFEmoAAAHNjkAAAXsmwAAI8nZAAALm6MAAA8TSAACtFC5AAB4RlgA==
From: "Allistair Crossley" <Allistair.Crossley@QAS.com>
To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>

Pleased you found a solution. Just to note however that the JK2 ISAPI =
filter for IIS does work with just 1 line change to jk2.properties IF =
you want to use NTLM.=20

You solution of getting IIS-REMOTE-USER variables makes your webapp =
dependent on IIS wheras JK2 sets request.getRemoteUser() and therefore =
removes that dependency.

After that, configuring JK2 ISAPI is added to IIS in the same way as any =
other ISAPI module including JSPISAPI. The registry settings for JK2 are =
annoying but no more so than any other installer.

Allistair

> -----Original Message-----
> From: Aris Javier [mailto:aristotle.javier@eazix.com]
> Sent: 02 September 2004 08:56
> To: Tomcat Users List
> Subject: SOLVED! RE: Why request.getRemoteUser() returns NULL ?
>=20
>=20
> I found it!
>=20
> Thanks to Akash Kava..=20
>=20
> to get User: request.getHeader("IIS-REMOTE-USER");
> to get Host: request.getHeader("IIS-REMOTE-ADDR");
>=20
> if you're using Tomcat+IIS thru jspisapi filter..=20
> it make use of NTLM authentication...
>=20
> no need for jcifs filter.. no need to change server.xml or web.xml or
> jk2.properties...
>=20
> Thanks Akash!!!
>=20
> Also watch out for JWEBEX (JWX)... it will replace JSP...
> It has features of .NET!
> Fast coding, auto login, auto integration with IIS, it will=20
> replace jsp,
>=20
> it can be used with existing tomcat without any new changes
>=20
> yes! go JAVA!
>=20
>=20
>=20
> -----Original Message-----
> From: Allistair Crossley [mailto:Allistair.Crossley@QAS.com]=20
> Sent: Wednesday, September 01, 2004 7:14 PM
> To: Tomcat Users List
> Subject: RE: Why request.getRemoteUser() returns NULL ?
>=20
>=20
> Hi,
>=20
> Ah! tomcatAuthentication=3Dfalse is configured in JK2 which is what I =
am
> using - JK2 ISAPI filter for IIS ...
>=20
> http://jakarta.apache.org/tomcat/connectors-doc/jk2/jk2/instal
> lhowto.htm
> l
>=20
> Perhaps this is a problem with your Jspisapi filter. Try changing to
> JK2.
>=20
> You do not need JCIFS since IIS will automatically put the Windows
> authenticated user into the request.=20
>=20
> ADC.
>=20
> > -----Original Message-----
> > From: Aris Javier [mailto:aristotle.javier@eazix.com]
> > Sent: 01 September 2004 11:47
> > To: Tomcat Users List
> > Subject: RE: Why request.getRemoteUser() returns NULL ?
> >=20
> >=20
> > im using tomcat5.0.25 and IIS via Jspisapi filter...
> >=20
> > are you using jcifs in your authentication to get
> > request.getRemoteUser() to work?
> >=20
> > i tried removing tomcatAuthentication=3D"false" in server.xml=20
> but to no=20
> > avail. it still fails. =3D|
> >=20
> > by changing the jk2.properties file, i don't need to include jcifs=20
> > filter in web.xml?
> >=20
> > -----Original Message-----
> > From: Allistair Crossley [mailto:Allistair.Crossley@QAS.com]
> > Sent: Wednesday, September 01, 2004 6:24 PM
> > To: Tomcat Users List
> > Subject: RE: Why request.getRemoteUser() returns NULL ?
> >=20
> >=20
> > remove the tomcatAuthentication=3D"false" attributes from=20
> server.xml and
>=20
> > use only jk2.properties? we do not have=20
> tomcatAuthentication=3D"false"=20
> > in the server.xml and it works that way. are you connecting via a
> > webserver? are you using AJP?
> >=20
> > ADC
> >=20
> > > -----Original Message-----
> > > From: Aris Javier [mailto:aristotle.javier@eazix.com]
> > > Sent: 01 September 2004 10:26
> > > To: Tomcat Users List
> > > Subject: RE: Why request.getRemoteUser() returns NULL ?
> > >=20
> > >=20
> > > i removed the comment, but still request.getRemoteUser()
> > returns NULL.
> >=20
> > > =3D|
> > >=20
> > > here's my server.xml;
> > > <Server port=3D"8005" shutdown=3D"SHUTDOWN" debug=3D"0">
> > >   <Listener
> > > className=3D"org.apache.catalina.mbeans.ServerLifecycleListener"
> > >             debug=3D"0"/>
> > >   <Listener=20
> > > className=3D"org.apache.catalina.mbeans.GlobalResourcesLifecycle
> > > Listener"
> > >             debug=3D"0"/>
> > >=20
> > >   <!-- Global JNDI resources -->
> > >   <GlobalNamingResources>
> > >=20
> > >     <!-- Test entry for demonstration purposes -->
> > >     <Environment name=3D"simpleValue" type=3D"java.lang.Integer"
> > > value=3D"30"/>
> > >=20
> > >     <!-- Editable user database that can also be used by
> > >          UserDatabaseRealm to authenticate users -->
> > >     <Resource name=3D"UserDatabase" auth=3D"Container"
> > >               type=3D"org.apache.catalina.UserDatabase"
> > >        description=3D"User database that can be updated and =
saved">
> > >     </Resource>
> > >     <ResourceParams name=3D"UserDatabase">
> > >       <parameter>
> > >         <name>factory</name>
> > > =20
> > > <value>org.apache.catalina.users.MemoryUserDatabaseFactory</value>
> > >       </parameter>
> > >       <parameter>
> > >         <name>pathname</name>
> > >         <value>conf/tomcat-users.xml</value>
> > >       </parameter>
> > >     </ResourceParams>
> > >=20
> > >   </GlobalNamingResources>
> > >   <Service name=3D"Catalina">
> > >   <Connector port=3D"8080" maxThreads=3D"150" =
minSpareThreads=3D"25"
> > > maxSpareThreads=3D"75"
> > >                enableLookups=3D"false" redirectPort=3D"8443"=20
> > > acceptCount=3D"100"
> > >                debug=3D"0" connectionTimeout=3D"20000"=20
> > >                disableUploadTimeout=3D"true"
> > > tomcatAuthentication=3D"false"
> > > />
> > >=20
> > >   <Connector port=3D"8009"
> > >                enableLookups=3D"false" redirectPort=3D"8443" =
debug=3D"0"
> > >                protocol=3D"AJP/1.3" tomcatAuthentication=3D"false" =
/>
> > >     <Engine name=3D"Catalina" defaultHost=3D"localhost" =
debug=3D"0">
> > >=20
> > >       <Logger className=3D"org.apache.catalina.logger.FileLogger"
> > >               prefix=3D"catalina_log." suffix=3D".txt"
> > >               timestamp=3D"true"/>
> > >       <Realm=20
> className=3D"org.apache.catalina.realm.UserDatabaseRealm"
> > >                  debug=3D"0" resourceName=3D"UserDatabase"/>
> > >=20
> > >       <Host name=3D"localhost" debug=3D"0" appBase=3D"webapps"
> > >        unpackWARs=3D"true" autoDeploy=3D"true"
> > >        xmlValidation=3D"false" xmlNamespaceAware=3D"false">
> > >=20
> > >         <Logger =
className=3D"org.apache.catalina.logger.FileLogger"
> > >                  directory=3D"logs"  prefix=3D"localhost_log."=20
> > > suffix=3D".txt"
> > >             timestamp=3D"true"/>
> > >            =20
> > >         <Context path=3D"/eqms" docBase=3D"eqms" debug=3D"5"=20
> > > reloadable=3D"true" crossContext=3D"true">
> > >               <Logger=20
> > > className=3D"org.apache.catalina.logger.FileLogger"
> > >                    prefix=3D"localhost_eqms_log." suffix=3D".txt"
> > >                    timestamp=3D"true"/>
> > >=20
> > >               <Resource name=3D"jdbc/EQMS_DS"
> > >                    auth=3D"Container"
> > >                    type=3D"javax.sql.DataSource"/>
> > >=20
> > >               <ResourceParams name=3D"jdbc/EQMS_DS">
> > >                   <parameter>
> > >                       <name>factory</name>
> > > =20
> > > <value>org.apache.commons.dbcp.BasicDataSourceFactory</value>
> > >                   </parameter>
> > >=20
> > >                   <!-- Maximum number of dB connections in
> > pool. Make
> > > sure you
> > >                      configure your mysqld max_connections large=20
> > > enough to handle
> > >                      all of your db connections. Set to 0 for=20
> > > no limit.
> > >                      -->
> > >                   <parameter>
> > >                       <name>maxActive</name>
> > >                       <value>100</value>
> > >                   </parameter>
> > >=20
> > >                   <!-- Maximum number of idle dB
> > connections to retain
> >=20
> > > in pool.
> > >                      Set to 0 for no limit.
> > >                      -->
> > >                   <parameter>
> > >                       <name>maxIdle</name>
> > >                       <value>30</value>
> > >                   </parameter>
> > >=20
> > >                   <!-- Maximum time to wait for a dB connection to
> > > become available
> > >                      in ms, in this example 10 seconds. An
> > > Exception is
> > > thrown if
> > >                      this timeout is exceeded.  Set to -1 to wait
> > > indefinitely.
> > >                      -->
> > >                   <parameter>
> > >                       <name>maxWait</name>
> > >                       <value>10000</value>
> > >                   </parameter>
> > >=20
> > >                   <!-- MySQL dB username and password for dB=20
> > > connections
> > >                   <parameter>
> > >                       <name>username</name>
> > >                       <value>javauser</value>
> > >                   </parameter>
> > >                       <parameter>
> > >                       <name>password</name>
> > >                       <value>javadude</value>
> > >                   </parameter>
> > >                   -->
> > >                   <!-- Class name for ACCESS JDBC driver -->
> > >                   <parameter>
> > >                        <name>driverClassName</name>
> > >                        <value>sun.jdbc.odbc.JdbcOdbcDriver</value>
> > >                   </parameter>
> > >=20
> > >                   <!-- The JDBC connection url for
> > connecting to your
> > > MySQL dB.
> > >                      The autoReconnect=3Dtrue argument to the
> > url makes
> > > sure that the
> > >                      mm.mysql JDBC Driver will
> > automatically reconnect
> >=20
> > > if mysqld closed the
> > >                      connection.  mysqld by default closes idle
> > > connections after 8 hours.
> > >                      -->
> > >                   <parameter>
> > >                       <name>url</name>
> > >                       <value>jdbc:odbc:EQMS_DS</value>
> > >                    </parameter>
> > >               </ResourceParams>
> > >         </Context>
> > > =20
> > >       </Host>
> > >=20
> > >     </Engine>
> > >=20
> > >   </Service>
> > >=20
> > > </Server>
> > >=20
> > >=20
> > > -----Original Message-----
> > > From: Allistair Crossley [mailto:Allistair.Crossley@QAS.com]
> > > Sent: Wednesday, September 01, 2004 5:09 PM
> > > To: Tomcat Users List
> > > Subject: RE: Why request.getRemoteUser() returns NULL ?
> > >=20
> > >=20
> > > you have
> > >=20
> > > # request.tomcatAuthentication=3Dfalse
> > >=20
> > > which means that line is commented out and not used. Change it to
> > >=20
> > > request.tomcatAuthentication=3Dfalse
> > >=20
> > > ADC
> > >=20
> > > > -----Original Message-----
> > > > From: Aris Javier [mailto:aristotle.javier@eazix.com]
> > > > Sent: 01 September 2004 10:00
> > > > To: Tomcat Users List
> > > > Subject: RE: Why request.getRemoteUser() returns NULL ?
> > > >=20
> > > >=20
> > > > i added request.tomcatAuthentication=3Dfalse inside
> > jk2.properties...
> > > > and set
> > > > windows integrated authentication on my website.
> > > >=20
> > > > but still... request.getRemoteUser() returns NULL... =3D|
> > > >=20
> > > > here's my jk2.properties file;
> > > >=20
> > > > ## THIS FILE MAY BE OVERRIDEN AT RUNTIME. MAKE SURE TOMCAT
> > > IS STOPED
> > > > ## WHEN YOU EDIT THE FILE.
> > > >=20
> > > > ## COMMENTS WILL BE _LOST_
> > > >=20
> > > > ## DOCUMENTATION OF THE FORMAT IN JkMain javadoc.
> > > >=20
> > > > # Set the desired handler list
> > > > # handler.list=3Dapr,request,channelJni
> > > > #
> > > > # Override the default port for the socketChannel
> > > > # channelSocket.port=3D8019
> > > > # Default:
> > > > # channelUnix.file=3D${jkHome}/work/jk2.socket
> > > > # Just to check if the the config  is working
> > > > # shm.file=3D${jkHome}/work/jk2.shm
> > > >=20
> > > > # In order to enable jni use any channelJni directive
> > > > # channelJni.disabled =3D 0
> > > > # And one of the following directives:
> > > >=20
> > > > # apr.jniModeSo=3D/opt/apache2/modules/mod_jk2.so
> > > >=20
> > > > # If set to inprocess the mod_jk2 will Register natives
> > > itself # This
> > > > will enable the starting of the Tomcat from mod_jk2 #=20
> > > > apr.jniModeSo=3Dinprocess
> > > >=20
> > > > # request.tomcatAuthentication=3Dfalse
> > > >=20
> > > > -----Original Message-----
> > > > From: Allistair Crossley [mailto:Allistair.Crossley@QAS.com]
> > > > Sent: Wednesday, September 01, 2004 4:21 PM
> > > > To: Tomcat Users List
> > > > Subject: RE: Why request.getRemoteUser() returns NULL ?
> > > >=20
> > > >=20
> > > > we do it by adding
> > > >=20
> > > > request.tomcatAuthentication=3Dfalse
> > > >=20
> > > > into tomcat/conf/jk2.properties
> > > >=20
> > > > if you are using IIS then you also need to set Windows=20
> Integrated=20
> > > > Authentication on your default website.
> > > >=20
> > > > ADC
> > > >=20
> > > > > -----Original Message-----
> > > > > From: Aris Javier [mailto:aristotle.javier@eazix.com]
> > > > > Sent: 01 September 2004 08:04
> > > > > To: tomcat-user@jakarta.apache.org
> > > > > Subject: Why request.getRemoteUser() returns NULL ?
> > > > >=20
> > > > >=20
> > > > > i found this in jguru...
> > > > > =20
> > > > > <Connector port=3D"8009" protocol=3D"AJP/1.3"
> > > > >=20
> protocolHandlerClassName=3D"org.apache.jk.server.JkCoyoteHandler"
> > > > > redirectPort=3D" 8443" tomcatAuthentication=3D"false">
> > > > > =20
> > > > > it stated there that if i do this in server.xml,
> > > > > request.getRemoteUser()
> > > > > will not equal to NULL.. ?
> > > > > =20
> > > > > i did, but request.getRemoteUser() returns NULL
> > > > > =20
> > > > > please, anybody.. do you know how to get
> > > request.getRemoteUser() to
> > > > > work?
> > > > > =20
> > > > > i need it badly! please!
> > > > > =20
> > > > > aris
> > > > > =20
> > > > > =20
> > > > >=20
> > > >=20
> > > >=20
> > > > <FONT SIZE=3D1 FACE=3D"VERDANA,ARIAL" COLOR=3DBLUE>
> > > > -------------------------------------------------------
> > > > QAS Ltd.
> > > > Developers of QuickAddress Software
> > > > <a href=3D"http://www.qas.com">www.qas.com</a>
> > > > Registered in England: No 2582055
> > > > Registered in Australia: No 082 851 474
> > > > -------------------------------------------------------
> > > > </FONT>
> > > >=20
> > > >=20
> > > >=20
> > >=20
> >=20
> ---------------------------------------------------------------------
> > > > To unsubscribe, e-mail:=20
> tomcat-user-unsubscribe@jakarta.apache.org
> > > > For additional commands, e-mail:
> > tomcat-user-help@jakarta.apache.org
> > > >=20
> > > >=20
> > > >=20
> > >=20
> >=20
> ---------------------------------------------------------------------
> > > > To unsubscribe, e-mail:=20
> tomcat-user-unsubscribe@jakarta.apache.org
> > > > For additional commands, e-mail:
> > tomcat-user-help@jakarta.apache.org
> > > >=20
> > > >=20
> > >=20
> > >=20
> >=20
> ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > > For additional commands, e-mail:=20
> tomcat-user-help@jakarta.apache.org
> > >=20
> > >=20
> > >=20
> >=20
> ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > > For additional commands, e-mail:=20
> tomcat-user-help@jakarta.apache.org
> > >=20
> > >=20
> >=20
> >=20
> ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> >=20
> >=20
> >=20
> ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> >=20
> >=20
>=20
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>=20
>=20
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>=20
>=20

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org