Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (athena.apache.org: domain of randeep123@gmail.com
 designates 209.85.223.171 as permitted sender)
MIME-Version: 1.0
Date: Mon, 7 Jul 2014 16:32:49 +0530
Message-ID: 
 <CACVHj-8dRf30uMC7N+FbQjYLr7DKSf5bfpGTtze_yQ2MXb9JGQ@mail.gmail.com>
Subject: sso integration with tomcat
From: Randeep <randeep123@gmail.com>
To: Tomcat Users List <users@tomcat.apache.org>
Content-Type: multipart/alternative; boundary=20cf300e4e55702fb904fd986a25

--20cf300e4e55702fb904fd986a25
Content-Type: text/plain; charset=UTF-8

Hi all,

We are trying to implement a single sign on tool with our website.

Our architecture is as follows.

httpd 2.2 (front end) + mod_jk + apache_tomcat 7.0.53 (back end)
we have 5 web applications in the webapps
we are using centos 5.4

We are currently testing with josso. (if you know something better please
let me know)

we are testing with josso's inbuilt sample app.
in tomcat/lib/*josso-gateway-stores.xml*
I have configured as follows.

    <db-istore:jdbc-store
            id="josso-identity-store"
            driverName="com.mysql.jdbc.Driver"
            connectionURL="jdbc:mysql://
stagingxyz.us-east-1.rds.amazonaws.com:3306/josso"
            connectionName="root"
            connectionPassword="abcde"
            userQueryString="SELECT LOGIN AS NAME FROM JOSSO_USER WHERE
LOGIN = ?"
            rolesQueryString="SELECT NAME AS ROLE FROM JOSSO_USER_ROLE
WHERE LOGIN = ?"
            credentialsQueryString="SELECT LOGIN AS USERNAME, PASSWORD FROM
JOSSO_USER WHERE LOGIN = ?"
            userPropertiesQueryString="SELECT NAME, VALUE FROM
JOSSO_USER_PROPERTY WHERE LOGIN = ?"
            resetCredentialDml="UPDATE JOSSO_USER SET PASSWORD = ? WHERE
LOGIN = ?"
            relayCredentialQueryString="SELECT LOGIN FROM JOSSO_USER WHERE
#?# = ?"
            certificateCredentialsQueryString="SELECT CERTIFICATE AS
USERCERTIFICATE FROM JOSSO_USER_CERTIFICATE WHERE CN = ?"
                        uidQueryString="SELECT LOGIN FROM
JOSSO_USER_CERTIFICATE WHERE CERTIFICATE = ?"
            />

But I can see db-sstore and db-astore do I need to configure these too? I
have followed this tutorial
http://www.josso.org/confluence/display/JOSSO1/Database+Setup

it doesnt have schema for session and other tables.

in josso-gateway-config.xml
I have added
    <!-- Identity, Session and Assertion Stores configuration -->
    <s:import resource="josso-gateway-stores.xml" />


as we are using plain text for testing I have configured
*josso-gateway-auth.xml
as follows:*
    <basic-authscheme:basic-auth-scheme
            id="josso-basic-authentication"
            ignorePasswordCase="false"
            ignoreUserCase="false">

but the problem is when we try to login using the partner app(In this
parter app i have configured web.xml and redirect pages accordingly)
it is not taking the credentials from the database. it is taking the
default ones only.

Kindly advice.
Please let me know if I have to provide any other details.

-- 
Randeep
Mob: +919880050349[B'lore]
http://twitter.com/Randeeppr
http://in.linkedin.com/in/randeeppr

[image: --]
Randeep Raman
[image: http://]about.me/Randeeppr
<http://about.me/Randeeppr>

--20cf300e4e55702fb904fd986a25--