Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
Received-SPF: pass (hermes.apache.org: domain of jerome.jar@gmail.com
 designates 64.233.170.197 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:references;
        b=mPLCR6a9tIfqZer216lzzhuoOJUE0Th6jrcY8N5AEjtcpkgJRrAyT/peLyu/4odYqpuyp7HfOEsYjb/hTBwMu5/n6n8yGNgQpICoN+8VqQiUASQObnYUO7p9SG0TqBKJWC3mPXS33plGPk1pB+qItWXG7ZWgBaje7aW+sYtaGeo=
Message-ID: <57fe892e0504081825459c8882@mail.gmail.com>
Date: Sat, 9 Apr 2005 09:25:42 +0800
From: Jerome Jar <jerome.jar@gmail.com>
Reply-To: Jerome Jar <jerome.jar@gmail.com>
To: Tomcat Users List <tomcat-user@jakarta.apache.org>
Subject: Re: Tomcat user 'roles' question
In-Reply-To: <023201c53c62$27973650$28ad93d1@irm.local>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
References: <023201c53c62$27973650$28ad93d1@irm.local>

I think you can modify the "UserDatabase" part in server.xml, to
change the authentiation to use in your own way.

On Apr 9, 2005 1:41 AM, Wendy Smoak <java@wendysmoak.com> wrote:
> The only exposure that I have to this is configuring tomcat-users.xml so I
> can use the manager webapp, so please bear with me.
> 
> I've got several web front-ends for a non-JDBC database.  There is a 'green
> screen' (telnet) app running against the DB that uses a system of user
> security classes to which different 'screens' are assigned.  That data is
> stored in the DB itself.  We've fit the web front end into this system by
> assigning each 'page' of the webapp a 'screen id', so that the admin can
> define who sees what in a single place.
> 
> What I'm wondering is if there's any hope of using this data with the
> existing request.isUserInRole() method.  (The security classes are (loosely)
> roles.)  I only need to deal with authorization.  Authentication is handled
> separately by a Filter that redirects elsewhere to make them log in.
> 
> Can someone point me in the right general direction?  Everything Google
> turns up starts in with configuring a JDBC or JNDI realm, and I don't think
> that part of it will ever work with this database.  Would I end up defining
> my own kind of a Realm?
> 
> Confused,
> --
> Wendy Smoak
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> 
>

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org