Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (nike.apache.org: domain of barry.l.propes@citi.com
 designates 192.193.221.105 as permitted sender)
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Subject: RE: Single sign on issue with Tomcat and Apache
Date: Tue, 3 Jun 2008 17:27:13 -0400
Message-ID: <3A55348B50FD2A40AAA40ABA16C6B6D60E7CDA89@EXNJMB23.nam.nsroot.net>
Thread-Topic: Single sign on issue with Tomcat and Apache
Thread-Index: AcjFv9zlhqIgbTx5RSWm3QS3ttagRgAABu+Q
From: "Propes, Barry L " <barry.l.propes@citi.com>
To: "Tomcat Users List" <users@tomcat.apache.org>

and you're stuck on Java 1.3.1 and cannot go forward?


-----Original Message-----
From: sridharmnj [mailto:sridharmnj@yahoo.co.in]
Sent: Tuesday, June 03, 2008 4:17 PM
To: users@tomcat.apache.org
Subject: RE: Single sign on issue with Tomcat and Apache


Apache 2.0.50
Tomcat 5.0.27
Java 1.3.1


Propes, Barry L wrote:
>=20
> what versions are you using? Of each?
>=20
> -----Original Message-----
> From: sridharmnj [mailto:sridharmnj@yahoo.co.in]
> Sent: Tuesday, June 03, 2008 3:52 PM
> To: users@tomcat.apache.org
> Subject: Single sign on issue with Tomcat and Apache
>=20
>=20
>=20
> Hi,
> I am integrating two websites using single sign on. I have two sites
> namely
> aaa.com and bbb.com.
>=20
> When a user navigates from aaa.com, as he is already authenticated in =
it,
> he
> should be allowed to bbb.com without asking the credentials again. =
This is
> my requirement.=20
>=20
> aaa.com is based on Tomcat Form based authentication and working fine.
>=20
> bbb.com's static data is deployed on apache and it requires apache =
BASIC
> authentication (htttd, and .htaccess). And dynamic data is deployed on
> Tomcat and based on Tomcat BASIC authentication.
>=20
> If I access static data of bbb.com, it first asks for credentials =
(Using a
> popup), authenticates using mod_auth_mysql, and once the user is
> authenticated, it is storing credentials in browser cache. When I =
navigate
> to dynamic content which is in tomcat, still its working without =
asking
> credentials twice. (I ensured that <realm-name> in web.xml and =
AuthName in
> .htaccess file are same).=20
>=20
> I enabled SingleSignOn valve in server.xml file, and trying to access
> bbb.com from aaa.com. When I try to access dynamic data of bbb.com =
from
> aaa.com, as both are based on Tomcat security, they are sharing the
> browser
> cached credentials. (Though one is based on form and another is based =
on
> basic authentication model). But, when I try to access bbb.com's =
static
> data
> (which is in apache) from aaa.com, again its asking credentials, using =
a
> popup.
>=20
> bbb.com is an old project which was developed around 9 yrs ago and I =
am
> not
> allowed to modify/reengineer the architecture.=20
>=20
> Could any one please guide me in right direction. I appreciate your =
help.
>=20
> Thanks,
> Sridhar=20
> --=20
> View this message in context:
> =
http://www.nabble.com/Single-sign-on-issue-with-Tomcat-and-Apache-tp17633=
391p17633391.html
> Sent from the Tomcat - User mailing list archive at Nabble.com.
>=20
>=20
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>=20
>=20
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>=20
>=20
>=20

--=20
View this message in context: =
http://www.nabble.com/Single-sign-on-issue-with-Tomcat-and-Apache-tp17633=
391p17633917.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org