Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (athena.apache.org: domain of ohaya@cox.net designates
 68.230.241.214 as permitted sender)
Message-ID: <20111202003123.9YQ8O.187168.imail@eastrmwml205>
Date: Fri, 2 Dec 2011 0:31:23 -0500
From: <ohaya@cox.net>
To: Tomcat Users List <users@tomcat.apache.org>
Subject: RE: Do any of the Tomcat LDAP-type realms support "no password"
 authentication?
Cc: "Caldarale, Charles R" <Chuck.Caldarale@unisys.com>
In-Reply-To: 
 <99C8B2929B39C24493377AC7A121E21FB00BCE404D@USEA-EXCH8.na.uis.unisys.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Sensitivity: Normal


---- "Caldarale wrote: 
> > From: ohaya@cox.net [mailto:ohaya@cox.net] 
> > Subject: Re: Do any of the Tomcat LDAP-type realms support "no password" authentication?
> 
> > In my sniffer, I can see the REMOTE_USER set to the hard-coded 
> > string, but in my test JSP on Tomcat, there getUserPrincipal()
> > is returning null.  I've tried this test with 'tomcatAuthentication'
> > attribute in server.xml set to both "true" and "false", with the
> > same results :(...
> 
> You might want to post (not attach) your server.xml so we can see exactly what you're setting.  Simple typos are often difficult for the author to see.  Please remove comments beforehand to reduce the amount of crud we have to wade through.
> 
>  - Chuck
> 
>

Chuck,

Thanks for the suggestion.  Here it is, minus most of "the curd" :).  It's basically vanilla Tomcat (note:  what I posted below has "false" for "tomcatAuthentication", but I tried with both "true" and "false").


<?xml version='1.0' encoding='utf-8'?>
<Server port="8005" shutdown="SHUTDOWN">

  <!--APR library loader. Documentation at /docs/apr.html -->
  <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
  <!--Initialize Jasper prior to webapps are loaded. Documentation at /docs/jasper-howto.html -->
  <Listener className="org.apache.catalina.core.JasperListener" />
  <!-- Prevent memory leaks due to use of particular java/javax APIs-->
  <Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" />
  <!-- JMX Support for the Tomcat server. Documentation at /docs/non-existent.html -->
  <Listener className="org.apache.catalina.mbeans.ServerLifecycleListener" />
  <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />

  <GlobalNamingResources>
    <Resource name="UserDatabase" auth="Container"
              type="org.apache.catalina.UserDatabase"
              description="User database that can be updated and saved"
              factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
              pathname="conf/tomcat-users.xml" />
  </GlobalNamingResources>

  <Service name="Catalina">
  
    <Connector port="8080" protocol="HTTP/1.1" 
               connectionTimeout="20000" 
               redirectPort="8443" />

    <Connector port="8009" protocol="AJP/1.3" redirectPort="8443" tomcatAuthentication="false" />


    <Engine name="Catalina" defaultHost="localhost">
    

      <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
             resourceName="UserDatabase"/>

      <Host name="localhost"  appBase="webapps"
            unpackWARs="true" autoDeploy="true"
            xmlValidation="false" xmlNamespaceAware="false">


      </Host>
    </Engine>
  </Service>
</Server>


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org