Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: neutral (athena.apache.org: local policy)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.co.uk;
  h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding;
  b=WaTkFXZtwjeG4E+/v4kGthTVkYBL6MmU9GbtMTZyof+lKJCkmCtgka24lGfSK8ovEmgiEk/mTnot4ayzJo1cjd84Kju8hsUpNT8eRytrob0Rky6dQOZocTcr46J9Z5Mydjjflfw9+I84K4MzsY10rG4SdKfkljSh6/IVR9NBcqI=;
Message-ID: <103289.85275.qm@web24202.mail.ird.yahoo.com>
Date: Wed, 19 May 2010 09:25:47 +0000 (GMT)
From: Neville Peter <p_nevilleuk@yahoo.co.uk>
Subject: Re: JAAS getRemoteUser security custom
To: Tomcat Users List <users@tomcat.apache.org>, pid@pidster.com
In-Reply-To: <4BF2B867.9050600@pidster.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi,=0A=0AI'm still not satisfied with the options so far and I'm sure I do =
not fully understand it:=0A=0AAlthough the valve works in that I can set th=
e principal on the catalina request, realm.authenticate("username","credent=
ials") within the valve is not actually passing anything to my JAAS login m=
odule although the login module is being used. Therefore, I can not current=
ly authenticate the user within the JAAS module correctly as there appears =
to be no data passed from the valve. Also, if I use the valve then what is =
the point of the servlet using LoginContext.login()?=0A=0AIf I choose not t=
o use a valve then I appear to not have any access to the request object wi=
thin JAAS. =0AEven if I use org.apache.catalina.realm.JAASCallbackHandler, =
I do not get access to the request. So how are you able to add the principa=
l to the request like you can do with the valve?=0A=0ASecurityFilter not an=
 option as it does not support SSO.=0A=0AThanks for the comments so far.=0A=
=0A=0A=0A=0A=0A> =0A> Using a Valve will give you access to the the interna=
l=0A> model of the=0A> request, so you can set Principals etc.=0A> =0A> I h=
ad the impression that a full JAAS implementation gave=0A> you access to=0A=
> the request and enabled the use of a Realm, but maybe it=0A> isn't what y=
ou=0A> need.=0A> =0A> The SecurityFilter project might be worth a look, bef=
ore=0A> you commit to=0A> rolling your own.=0A> =0A> =0A> p=0A=0A=0A=0A    =
  

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org