tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Frederic.Visti...@alcatel.fr
Subject Re: JAAS DIGEST authentication Tomcat5.5.17
Date Tue, 02 May 2006 06:50:27 GMT
Mark,
I think the pb is not due to DIGEST password format.
My JAAS LoginModule who is working with FORM and BASIC authentication is 
not called during DIGEST authentication.
I have inserted some traces in the authenticate, initialize and login 
methods of my LoginModule...and no traces are generated...
I'm thinking my LoginModule is never used by Tomcat wiht Digest 
authentication !!!

Visticot Frédéric
0130771312




Mark Thomas <markt@apache.org>
02/05/2006 03:47
Please respond to "Tomcat Users List"
 
        To:     Tomcat Users List <users@tomcat.apache.org>
        cc: 
        Subject:        Re: JAAS DIGEST authentication Tomcat5.5.17


Frederic.Visticot@alcatel.fr wrote:
> I have Tomcat working with FORM and BASIC authentication. All is OK for 
> this 2 modes.
> When i try with DIGEST and insert digest="MD5" in the JAAS realm i have 
> the error copied in attach.

With DIGEST auth and digest="MD5" you need to make sure the passwords
are digested as per
http://tomcat.apache.org/tomcat-5.5-doc/realm-howto.html#Digested%20Passwords


If you want to use DIGEST and passwords stored in the realm are in plain
text you should not specify digest attribute for the realm.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org



Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message