tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher Schultz <ch...@christopherschultz.net>
Subject Re: Connection.close() has already been called during login
Date Mon, 23 Jan 2012 20:15:42 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

To whom it may concern,

On 1/23/12 2:54 PM, removeps-code@yahoo.com wrote:
> Sorry, I did not know about [LockOutRealm].  Will this class work
> if you have many Tomcats on different machines (possibly load
> balancing) so regardless of which exact machine the user is
> directed to, lock realm will know the number of failed login
> attempts on other machines?

No, neither this nor any other Tomcat realms are cluster-aware.

If you want to track authentication failures across a cluster, you
could subclass LockOutRealm and override these methods:

- - isLocked
- - unlock
- - registerAuthFailure

This will allow you to handle the cluster-sync behavior separately
from the authentication behavior which this class already handles.

I'm interested in seeing what you come up with for communicating with
the rest of the cluster.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk8dv+4ACgkQ9CaO5/Lv0PDRnwCgvZFJvYXbU8Gwec6y430aD/rz
Kk4An2C5ZwXZf4NEaS31A5CWngqGxI9F
=zDyr
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message