You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2015/03/14 18:29:55 UTC

[Bug 57706] New: Documentation for tomcatAuthentication too vague: confusion over authentication and authorization

https://bz.apache.org/bugzilla/show_bug.cgi?id=57706

            Bug ID: 57706
           Summary: Documentation for tomcatAuthentication too vague:
                    confusion over authentication and authorization
           Product: Tomcat 7
           Version: 7.0.59
          Hardware: PC
                OS: Mac OS X 10.1
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Documentation
          Assignee: dev@tomcat.apache.org
          Reporter: minfrin@sharp.fm

At http://tomcat.apache.org/tomcat-7.0-doc/config/ajp.html the documentation
for tomcatAuthentication states as follows:

"If set to true, the authentication will be done in Tomcat. Otherwise, the
authenticated principal will be propagated from the native webserver and used
for authorization in Tomcat. The default value is true."

This documentation is incorrect, it should instead read as follows:

"If set to true, authentication and authorization will be done in Tomcat.
Otherwise, the authenticated principal will be propagated from the native
webserver and used for authentication in Tomcat, while all role memberships
will be considered false. The default value is true."

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

[Bug 57706] Documentation for tomcatAuthentication too vague: confusion over authentication and authorization

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=57706

Mark Thomas <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #2 from Mark Thomas <ma...@apache.org> ---
Fixed in 6.0.x for 6.0.44 onwards.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

[Bug 57706] Documentation for tomcatAuthentication too vague: confusion over authentication and authorization

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=57706

Mark Thomas <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Product|Tomcat 7                    |Tomcat 6
          Component|Documentation               |Documentation
            Version|7.0.59                      |6.0.43
   Target Milestone|---                         |default

--- Comment #1 from Mark Thomas <ma...@apache.org> ---
With the implementation of tomcatAuthorization this only applied to 6.0.x now.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org