Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
Received-SPF: neutral (asf.osuosl.org: local policy)
Date: Thu, 22 Sep 2005 08:45:25 +0200
From: Antony GUILLOTEAU <antony.guilloteau@systeme-u.fr>
Subject: =?ISO-8859-1?Q?R=E9p.=20:=20Re:=20How=20show=20CLIENT-CERT=20Rea?=
 =?ISO-8859-1?Q?lm?=
To: markt@apache.org, tomcat-user@jakarta.apache.org
Message-id: <s3326f35.025@u3antn15.ouest.systeme-u.fr>
MIME-version: 1.0
Content-type: multipart/alternative;
 boundary="Boundary_(ID_Z/RIv44D/R+ZylUcKPsYaQ)"

--Boundary_(ID_Z/RIv44D/R+ZylUcKPsYaQ)
Content-type: text/plain; charset=US-ASCII
Content-transfer-encoding: 7BIT

Thanks.
Like I've found nothing, I'm choosing a solution like this.
So it is impossible to show CLIENT-CERT realm like response.setHeader("WWW-Authenticate", "CLIENT-CERT realm=\"myName\"");

I've an another question : how to redirect an request to the secure port within a serlvet ? I post a new message.


>>> markt@apache.org 21/09/2005 21:15:39 >>>
Antony GUILLOTEAU wrote:
> I'm able to show the login window of a basic realm with following code :
>    response.setHeader("WWW-Authenticate", "BASIC realm=\"myName\"");
>    response.sendError(HttpServletResponse.SC_UNAUTHORIZED);
> 
> Now I wish to show the window like CLIENT-CERT : when all realm parameters are set in the web.xml that 's work fine. But I want to do the same thing programmaticly with response.sendError(HttpServletResponse.SC_UNAUTHORIZED).
> 
> I think it is done in the tomcat code ... but where ?
> 
> Thanks

It is done in o.a.c.authenticator.AuthenticatorBase and the process is 
basically issue a redirect to SSL. You will need to set the clientAuth 
attribute on the connector to true to require all connections to 
present a client certificate. If you want to validate the clienbt 
certificate, have a look at o.a.c.authenticator.SSLAuthenticator

Mark


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org

--Boundary_(ID_Z/RIv44D/R+ZylUcKPsYaQ)--