Mailing-List: contact tomcat-dev-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Developers List" <tomcat-dev@jakarta.apache.org>
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: RE: SingleSignOn Valve and FormAuthenticator Principal Caching
Date: Mon, 24 Nov 2003 09:39:52 -0600
Message-ID: <6A403F1AF18CB544A044D7572E2800CCA4BEC3@sits2.itssiemens.com>
Thread-Topic: SingleSignOn Valve and FormAuthenticator Principal Caching
Thread-Index: AcOxVBQK/TV3gFcsR220AtrA12uWPQBTM0Dg
From: "Nelson, Luke" <Luke.Nelson@itssiemens.com>
To: "Tomcat Developers List" <tomcat-dev@jakarta.apache.org>

Brian,

What format is your attachement in?  When I try to follow the link, it
asks me to open a file named "showattachment" with no suffix.  It
doesn't appear to be text.

Does your fix do anything for bug 9077?  I've been working on fixing the
patch that is already pending for 9077.

Luke

-----Original Message-----
From: Brian Stansberry [mailto:brian_stansberry@wanconcepts.com]=20
Sent: Saturday, November 22, 2003 4:55 PM
To: Tomcat Developers List
Subject: Re: SingleSignOn Valve and FormAuthenticator Principal Caching

Hi,

Your timing is good to bring this up.  We should definitely compare
notes.  Last night I committed a patch to JBoss that deals with this
issue (classes can be found in the JBoss CVS in the
org.jboss.web.catalina.tc4 package; most are in the authenticator
subpackage).

The JBoss patch is really more properly a Tomcat patch, but the JBoss
folks asked me to commit it.  I was planning to post a version to the
Tomcat Bugzilla this weekend.  In fact, I'll do it (against Bug 23881)
as soon as I send this.  The TC patch is against TC 5 HEAD; the JBoss
version is against TC 4.1, plus has some minor tweaks to optimize for
embedding in JBoss.

Best,

Brian Stansberry
WAN Concepts, Inc.
www.wanconcepts.com
Tel:    (510) 894-0114 x 116
Fax:    (510) 797-3005=20

At 04:27 PM 11/21/2003 -0600, you wrote:
>I believe that I have found a problem with the SingleSignOn valve, and
>the Principal caching that is performed in the FormAuthenticator.  I
>believe that I have a valid patch for the issue, and I would like to
>discuss my proposed changes with the community.  After reading the
>community rules, however, I'm unsure whether I'm suppose to present
this
>discussion on the mailing list, or create a new bug report, and have
>everything tracked there.  I believe my patch fixes some interaction
>problems with JBoss and Tomcat when Tomcat is used as an embedded
server
>(related to bug 23881).
>
>Luke Nelson
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
>For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org