Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (nike.apache.org: domain of aw@ice-sa.com designates
 212.85.38.228 as permitted sender)
Message-ID: <4BFC2E9D.4080501@ice-sa.com>
Date: Tue, 25 May 2010 22:10:05 +0200
From: =?ISO-8859-1?Q?Andr=E9_Warnier?= <aw@ice-sa.com>
Reply-To: Tomcat Users List <users@tomcat.apache.org>
User-Agent: Thunderbird 2.0.0.23 (Windows/20090812)
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: Question on workers.properties file
References: <28599711.post@talk.nabble.com> <4BF45BB5.6080808@ice-sa.com>
 <28615200.post@talk.nabble.com>
 <4BF4EA44.3060200@ice-sa.com>	 <28619632.post@talk.nabble.com>
 <4BF5188F.1080904@ice-sa.com> <28620069.post@talk.nabble.com>
 <4BF527E5.9030603@ice-sa.com>	 <28620453.post@talk.nabble.com>
 <4BF52BB7.1090408@ice-sa.com> <4BF5A1AD.4070905@kippdata.de>
 <45572F79660DDC429F6B44582360A9AB010AA76B57@PHDEXMB01.txhealth.org>
 <4BFA8F73.3060506@ice-sa.com>
 <45572F79660DDC429F6B44582360A9AB010AA76C2D@PHDEXMB01.txhealth.org>,<4BFAE677.2050809@ice-sa.com>
 <45572F79660DDC429F6B44582360A9AB0108A45A9A@PHDEXMB01.txhealth.org>,<AF5EF1769D564645A9ACC947375F0D021575D0367D@winxbeus13.exchange.xchg>
 <45572F79660DDC429F6B44582360A9AB0108A45A9B@PHDEXMB01.txhealth.org>
 <AF5EF1769D564645A9ACC947375F0D021575D036BD@winxbeus13.exchange.xchg>
In-Reply-To: 
 <AF5EF1769D564645A9ACC947375F0D021575D036BD@winxbeus13.exchange.xchg>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

dB. wrote:
> IMHO the IIS redirection is a total hack. It's a lot of additional load, a whole other web server to deal with, configure and administer. Because you're merely hiding Tomcat behind IIS you're not really getting rid of your tomcat server, you're just masking the problem.
> 
> I'll allow myself to theorize that Jakarta redirector was a stop gap solution because people didn't want a Windows-only valve to do NTLM or because they couldn't write one.
> 
dB,
I believe that you are missing the point.
Tomcat does things that Apache and/or IIS do not, running Java webapps 
being the main one.
IIS and/or Apache do things that Tomcat does not, or not well.
There are legitimate cases for using an Apache or IIS front-end to 
Tomcat, most of which having nothing to do with authentication.
And that is where one uses the Jk redirector.

You are right that using an IIS front-end /only/ to do authentication is 
a bit of a hack, but that is the express purpose here.
Basically, the OP is just trying to retrieve in Tomcat the user-id that 
should be there anyway at the IIS level, because in the OP's particular 
case it was the easiest path to follow, application-wise.

That it turns out to be such a difficult birth is mainly because of the 
OP's lack of familiarity with the IIS/JKRedirector/Tomcat configuration, 
not because of any flaw in the redirector or in the OP's basic plan.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org