Return-Path: 
 <users-return-175797-apmail-tomcat-users-archive=tomcat.apache.org@tomcat.apache.org>
Delivered-To: apmail-tomcat-users-archive@www.apache.org
Received: (qmail 70051 invoked from network); 7 Feb 2008 15:34:04 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 7 Feb 2008 15:34:04 -0000
Received: (qmail 87664 invoked by uid 500); 7 Feb 2008 15:33:46 -0000
Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org
Received: (qmail 86767 invoked by uid 500); 7 Feb 2008 15:33:45 -0000
Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@tomcat.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@tomcat.apache.org>
List-Post: <mailto:users@tomcat.apache.org>
List-Id: <users.tomcat.apache.org>
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Delivered-To: mailing list users@tomcat.apache.org
Received: (qmail 86756 invoked by uid 99); 7 Feb 2008 15:33:45 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 07 Feb 2008 07:33:45 -0800
X-ASF-Spam-Status: No, hits=-0.0 required=10.0
	tests=SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (athena.apache.org: local policy)
Received: from [152.3.174.85] (HELO smtp.duke.edu) (152.3.174.85)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 07 Feb 2008 15:33:13 +0000
Received: from smtp.duke.edu (localhost.localdomain [127.0.0.1])
	by localhost (Postfix) with SMTP id 0812635AC4F
	for <users@tomcat.apache.org>; Thu,  7 Feb 2008 10:33:16 -0500 (EST)
Received: from dyn-152-3-125-51.oit.duke.edu (dyn-152-3-125-51.oit.duke.edu
 [152.3.125.51])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by smtp.duke.edu (Postfix) with ESMTP id C602135A020
	for <users@tomcat.apache.org>; Thu,  7 Feb 2008 10:33:15 -0500 (EST)
Message-ID: <47AB2497.8010009@duke.edu>
Date: Thu, 07 Feb 2008 10:32:39 -0500
From: Gary Weaver <gary.weaver@duke.edu>
User-Agent: Thunderbird 2.0.0.9 (Macintosh/20071031)
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: in Tomcat container-based authN is there a way to redirect logins
 to a URL?
References: <47AB1991.1070003@duke.edu>
 <47AB1E38.5070201@christopherschultz.net>
In-Reply-To: <47AB1E38.5070201@christopherschultz.net>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-PMX-Version: 5.4.1.325704, Antispam-Engine: 2.6.0.325393,
 Antispam-Data: 2008.2.7.72024
X-Virus-Checked: Checked by ClamAV on apache.org

Chris,

In the version of Tomcat I'm using 5.5.25, when I do what you are 
suggesting, and set the config to:

  <login-config>
    <auth-method>FORM</auth-method>
    <realm-name>demo</realm-name>
    <form-login-config>
      <form-login-page>/Shibboleth.sso/Login</form-login-page>
      <form-error-page>/Shibboleth.sso/Login</form-error-page>
    </form-login-config>
  </login-config>

I get the following error, because those two page elements are relative 
to the webapp and not to the host part of the URL:


  HTTP Status 404 - /caladmin/Shibboleth.sso/Login

------------------------------------------------------------------------

*type* Status report

*message* _/caladmin/Shibboleth.sso/Login_

*description* _The requested resource (/caladmin/Shibboleth.sso/Login) 
is not available._

------------------------------------------------------------------------


      Apache Tomcat/5.5.25


I need it to redirect to /Shibboleth.sso/Login instead of 
/(webapp)/Shibboleth.sso/Login. Any idea how I could do that in Tomcat 
5.5.x?

Thanks!
Gary



Christopher Schultz wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Gary,
>
> Gary Weaver wrote:
> | I'm having trouble finding a way (maybe it is because it isn't
> | possible?) of making Tomcat send users to the relative URL
> | "/Shibboleth.sso/Login" (not served by Tomcat) in order to login if
> | the Tomcat session times out, etc.
>
> Does it work to simply make your application's <form-login-page> point
> to /Shibboleth.sso/Login? If you do that, what happens?
>
> | Does anyone know of a way to redirect Tomcat to point at some other
> | URL, specifically the relative URL "/Shibboleth.sso/Login" (not
> | served by Tomcat)?
>
> I think some versions of Tomcat do a server-side forward when the login
> form is required, while other versions will do a redirect. If you can
> get Tomcat to do a redirect, this ought to work. If it's attempting to
> do a server-side forward, you may have to take other steps.
>
> - -chris
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.8 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iEYEARECAAYFAkerHjgACgkQ9CaO5/Lv0PDEewCgsaWxeBEsPBa8VLQ4Ut8Y687c
> 5gYAn2IC0OWh7LTtZMq01y5jB07YI+Xp
> =cEAC
> -----END PGP SIGNATURE-----
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>


-- 
Gary Weaver
Internet Framework Services
Office of Information Technology
Duke University


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org