Return-Path: X-Original-To: apmail-tomcat-users-archive@www.apache.org Delivered-To: apmail-tomcat-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id C95A9B77F for ; Fri, 20 Jan 2012 19:40:04 +0000 (UTC) Received: (qmail 28072 invoked by uid 500); 20 Jan 2012 19:40:01 -0000 Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org Received: (qmail 27803 invoked by uid 500); 20 Jan 2012 19:40:00 -0000 Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Tomcat Users List" Delivered-To: mailing list users@tomcat.apache.org Received: (qmail 27792 invoked by uid 99); 20 Jan 2012 19:39:59 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 20 Jan 2012 19:39:59 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=5.0 tests=RCVD_IN_DNSWL_LOW,SPF_NEUTRAL X-Spam-Check-By: apache.org Received-SPF: neutral (athena.apache.org: 193.74.71.27 is neither permitted nor denied by domain of tim.depauw@hogent.be) Received: from [193.74.71.27] (HELO eir.is.scarlet.be) (193.74.71.27) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 20 Jan 2012 19:39:55 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=scarlet.be; s=scarlet; t=1327088358; bh=CJ43rOxIukzrHo9V/WcvpcMiBmwHVEUNvUbyAhY2ygk=; h=Message-ID:Date:From:MIME-Version:To:Subject:References: In-Reply-To:Content-Type:Content-Transfer-Encoding; b=HvTxDZ1nh8dxASkezzp1mxE0cLFHjlG3k8VzbfsvaFvoV/EmbQqGjK2yRtnmI1iLa VaGPWYFhO1sP/qYs/bIEYXyDbHVDffh/v7YTKRkE7jQsGXEjumHmhQW8JpPTiNdaKR +WbyriG8sheQK8FGHDXIgXXyYNl7xw/be3jKNipQ= Received: from [172.16.0.13] (ip-83-134-158-173.dsl.scarlet.be [83.134.158.173]) by eir.is.scarlet.be (8.14.5/8.14.5) with ESMTP id q0KJdHD3022563 for ; Fri, 20 Jan 2012 20:39:18 +0100 X-Scarlet: d=1327088358 c=83.134.158.173 Message-ID: <4F19C2ED.4040909@hogent.be> Date: Fri, 20 Jan 2012 20:39:25 +0100 From: Tim De Pauw User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:9.0) Gecko/20111222 Thunderbird/9.0.1 MIME-Version: 1.0 To: users@tomcat.apache.org Subject: Re: Per-user management rights References: <4F1985F0.7060804@hogent.be> <4F1986E1.1040200@apache.org> <4F1989C8.5080308@hogent.be> <4F198FA6.7040500@christopherschultz.net> <4F1996A8.3070807@hogent.be> <4F199B70.6070001@christopherschultz.net> In-Reply-To: <4F199B70.6070001@christopherschultz.net> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-DCC-scarlet.be-Metrics: eir 20002; Body=1 Fuz1=1 Fuz2=1 X-Virus-Scanned: clamav-milter 0.97.1-exp at eir X-Virus-Status: Clean Then my conclusion was premature. I stand corrected! Tim On 1/20/2012 5:50 PM, Christopher Schultz wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Tim, > > On 1/20/12 11:30 AM, Tim De Pauw wrote: >> Not sure; a quick test seemed to suggest this, but I may have been >> doing something wrong. If I have two hosts X and Y that resolve to >> the same IP, can I still use AJP to forward requests to the >> respective Tomcat host? > > Absolutely. AJP forwards everything from the web server to Tomcat. > Tomcat can determine which virtual host should service the request > just like the web server can. > >> Regardless, I came across an old discussion [1], which suggests >> implementing a servlet filter to check the authenticated user >> against an ACL, and throwing a 403 if necessary. I hacked a filter >> together, placed the class file under >> /webapps/manager/WEB-INF/classes, mapped it to /text/* in >> /webapps/manager/WEB-INF/web.xml, and I was good to go! > > That will definitely work. > > - -chris > -----BEGIN PGP SIGNATURE----- > Version: GnuPG/MacGPG2 v2.0.17 (Darwin) > Comment: GPGTools - http://gpgtools.org > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ > > iEYEARECAAYFAk8Zm3AACgkQ9CaO5/Lv0PDwsACfaY5OJYMt5jPms9Y3vxB3YcYe > sNsAni3yxlXvaSwkZYBJ0THRN0DubbKU > =E9d/ > -----END PGP SIGNATURE----- -- Tim De Pauw Vakgroep Informatica Geassocieerde faculteit Toegepaste Ingenieurswetenschappen Hogeschool Gent http://tiwi.be/ --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org For additional commands, e-mail: users-help@tomcat.apache.org