Return-Path: 
 <users-return-212439-apmail-tomcat-users-archive=tomcat.apache.org@tomcat.apache.org>
Delivered-To: apmail-tomcat-users-archive@www.apache.org
Received: (qmail 23320 invoked from network); 20 May 2010 07:53:28 -0000
Received: from unknown (HELO mail.apache.org) (140.211.11.3)
  by 140.211.11.9 with SMTP; 20 May 2010 07:53:28 -0000
Received: (qmail 85081 invoked by uid 500); 20 May 2010 07:53:24 -0000
Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org
Received: (qmail 84994 invoked by uid 500); 20 May 2010 07:53:24 -0000
Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@tomcat.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@tomcat.apache.org>
List-Post: <mailto:users@tomcat.apache.org>
List-Id: <users.tomcat.apache.org>
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Delivered-To: mailing list users@tomcat.apache.org
Received: (qmail 84985 invoked by uid 99); 20 May 2010 07:53:24 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 20 May 2010 07:53:24 +0000
X-ASF-Spam-Status: No, hits=1.8 required=10.0
	tests=AWL,RCVD_IN_BL_SPAMCOP_NET,SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (athena.apache.org: domain of aw@ice-sa.com designates
 212.85.38.228 as permitted sender)
Received: from [212.85.38.228] (HELO tor.combios.es) (212.85.38.228)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 20 May 2010 07:53:18 +0000
Received: from localhost (localhost [127.0.0.1])
	by tor.combios.es (Postfix) with ESMTP id 02EC9226223
	for <users@tomcat.apache.org>; Thu, 20 May 2010 09:52:01 +0200 (CEST)
Received: from tor.combios.es ([127.0.0.1])
	by localhost (tor.combios.es [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 6cuE-cmOt8f7 for <users@tomcat.apache.org>;
	Thu, 20 May 2010 09:52:00 +0200 (CEST)
Received: from [10.174.1.97] (unknown [89.204.137.97])
	by tor.combios.es (Postfix) with ESMTPA id 21CE1226208
	for <users@tomcat.apache.org>; Thu, 20 May 2010 09:51:59 +0200 (CEST)
Message-ID: <4BF4EA44.3060200@ice-sa.com>
Date: Thu, 20 May 2010 09:52:36 +0200
From: =?ISO-8859-1?Q?Andr=E9_Warnier?= <aw@ice-sa.com>
Reply-To: Tomcat Users List <users@tomcat.apache.org>
User-Agent: Thunderbird 2.0.0.23 (Windows/20090812)
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: Question on workers.properties file
References: <28599711.post@talk.nabble.com> <4BF45BB5.6080808@ice-sa.com>
 <28615200.post@talk.nabble.com>
In-Reply-To: <28615200.post@talk.nabble.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Ok then.  I am not familiar with IIS, but try the following :
In the AJP <Connector> of Tomcat, in server.xml, add the attribute
tomcatAuthentication="false".

Then try again in your servlet with getRemoterUser().

If that does not work, then we wiil have to find an easy way to dump the 
HTTP request headers received by Tomcat, to see if there is one there 
from which we can obtain the user-id.

Note that this is all a shortcut that may work in some cases.
If your real final purpose is to do SSO at the Tomcat level, based on 
the user's Domain login, then I suggest that you have a look here :
www.ioplex.com  (Jespa)



savoym wrote:
> Yes.  The users are already being authenticated by IIS before IIS forwards
> the request to Tomcat.  And yes, I am wanting to retrieve in my java app
> this userid from what I thought would be through the HttpServletRequest
> class.  However, that is not working.  I tried to retrieve it using this
> class on the header Authorization but I am still getting a NULL value. 
> 
> I understood, that maybe through the workers.properties file I could SET a
> server environment variable using the Request.ServerVariable("AUTH_USER")
> method but I'm not sure how to accomplish that if that is a possibility.
> 
> I guess I'm just not sure how to get at the USERID that IIS should already
> have in some form or fashion.
> 
> I hope that is more clear.  I appreciate very much the question and reply.
> 
> Regards.
> 
> 
> 
> awarnier wrote:
>> savoym wrote:
>>> I just got IIS to forward my request to Tomcat using the Apache
>>> Tomcat-Connectors doc. 
>>>
>>> I am trying to authenticate the user login/id that executes the request
>>> to
>>> my web app to be able to grab the user login and use in my java  app. 
>>>
>> Can you explain a little bit more in detail, or maybe just in another 
>> way, what you are trying to achieve ?
>> Are users already authenticated by IIS (as per their Windows Domain 
>> user-id), before IIS forwards the request to Tomcat ? And do you want to 
>> retrieve this user-id in Tomcat ?
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>>
>>
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org