From users-return-205515-apmail-tomcat-users-archive=tomcat.apache.org@tomcat.apache.org Wed Dec 02 17:34:51 2009 Return-Path: Delivered-To: apmail-tomcat-users-archive@www.apache.org Received: (qmail 23750 invoked from network); 2 Dec 2009 17:34:51 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 2 Dec 2009 17:34:51 -0000 Received: (qmail 39993 invoked by uid 500); 2 Dec 2009 17:34:47 -0000 Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org Received: (qmail 39937 invoked by uid 500); 2 Dec 2009 17:34:47 -0000 Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Tomcat Users List" Delivered-To: mailing list users@tomcat.apache.org Received: (qmail 39926 invoked by uid 99); 2 Dec 2009 17:34:47 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Dec 2009 17:34:47 +0000 X-ASF-Spam-Status: No, hits=-2.6 required=5.0 tests=AWL,BAYES_00 X-Spam-Check-By: apache.org Received-SPF: neutral (athena.apache.org: local policy) Received: from [76.96.62.32] (HELO QMTA03.westchester.pa.mail.comcast.net) (76.96.62.32) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Dec 2009 17:34:44 +0000 Received: from OMTA01.westchester.pa.mail.comcast.net ([76.96.62.11]) by QMTA03.westchester.pa.mail.comcast.net with comcast id CCuL1d00L0EZKEL53HaRVg; Wed, 02 Dec 2009 17:34:25 +0000 Received: from [192.168.1.200] ([69.143.128.194]) by OMTA01.westchester.pa.mail.comcast.net with comcast id CHaQ1d00K4BnRt93MHaRvC; Wed, 02 Dec 2009 17:34:25 +0000 Message-ID: <4B16A521.3090203@christopherschultz.net> Date: Wed, 02 Dec 2009 12:34:25 -0500 From: Christopher Schultz User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1.4pre) Gecko/20090915 Thunderbird/3.0b4 MIME-Version: 1.0 To: Tomcat Users List Subject: Re: Basic and Form Authentication References: <1259667535.3541.1347843907@webmail.messagingengine.com> <4B150494.4010303@ice-sa.com> In-Reply-To: <4B150494.4010303@ice-sa.com> X-Enigmail-Version: 0.97a Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 André, On 12/1/2009 6:57 AM, André Warnier wrote: > Peter Crowther wrote: >> 2009/12/1 Anthony Jay : >>> As for cross application communication I will have to revisit our own >>> code to see if there are static/singleton services that can be >>> re-engineered and decoupled. >> >> This may be one of the few appropriate times where you may want to put >> code for the singletons (and all the classes that might be referenced >> by your singletons) in common/lib. It's not an ideal solution, but it >> may save you considerable effort as those classes will then be loaded >> by a single classloader, rather than the per-webapp classloaders. >> > Or then, this may be a case where you want to explore front-ending these > applications with an Apache httpd server, linked to Tomcat via an AJP > connector. > There is considerably more flexibility in Apache httpd regarding AAA > (since for one it is not bound by the servlet spec), and once a request > is authenticated, Apache and the connector will happily pass this > authenticated id to Tomcat. And you would have to change nothing to > your servlet-engine side code, singletons and all. Yeah, the problem is that AFAICT there is no standard way to do form-based authentication with Apache httpd. HTTP BASIC AUTH works wonderfully, but how would one implement form-based credential gathering? Is a custom module required for this, or does httpd come packaged with something that would work, even if a custom form /page/ would have to be developed that POSTs to a special URL? - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAksWpSEACgkQ9CaO5/Lv0PD+jQCgm7QDsfdi+cfwF/n4mlo1ZHus bO0An1qrEFK3doN0l6D4zSkRREJ33YZ8 =vnb7 -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org For additional commands, e-mail: users-help@tomcat.apache.org