You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by xiaojing xu <pr...@googlemail.com> on 2007/09/17 04:55:40 UTC
JNDIRealm can not support http digest mode
I want to use JNDIRealm in http digest mode. But I found that
JNDIRealm have not overridden the method in RealmBase
authenticate(String username, String clientDigest,
String nOnce, String nc, String cnonce,
String qop, String realm,
String md5a2)
and this method will invoke abstract method getPassword(String
username) which in JNDIRealm just return null.
Although I can change the getPassword function in JNDIRealm, I still
want to know if tomcat can implement JNDIRealm
in http digest mode without change code
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: JNDIRealm can not support http digest mode
Posted by Mark Thomas <ma...@apache.org>.
xiaojing xu wrote:
> I think this bug is different from my problem.I want to use http digest mode
> (RFC2617 HTTP Authentication: Basic and Digest Access Authentication).
> And the bug 37984 just want to resolve password in MD5 digest(may be
> not use http digest mode).
Sorry - my bad. Too many digests ;). The root cuase is the same though,
getPassword() needs to return something other than null. You won't be
able to use HTTP digest or digested passwords without some code changes.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: JNDIRealm can not support http digest mode
Posted by xiaojing xu <pr...@googlemail.com>.
I think this bug is different from my problem.I want to use http digest mode
(RFC2617 HTTP Authentication: Basic and Digest Access Authentication).
And the bug 37984 just want to resolve password in MD5 digest(may be
not use http digest mode).
2007/9/17, Mark Thomas <ma...@apache.org>:
> xiaojing xu wrote:
> > Although I can change the getPassword function in JNDIRealm, I still
> > want to know if tomcat can implement JNDIRealm
> > in http digest mode without change code
>
> No. See http://issues.apache.org/bugzilla/show_bug.cgi?id=37984
>
> Mark
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: JNDIRealm can not support http digest mode
Posted by Mark Thomas <ma...@apache.org>.
xiaojing xu wrote:
> Although I can change the getPassword function in JNDIRealm, I still
> want to know if tomcat can implement JNDIRealm
> in http digest mode without change code
No. See http://issues.apache.org/bugzilla/show_bug.cgi?id=37984
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org