You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Geofrey Rainey <Ge...@tvnz.co.nz> on 2009/08/04 08:52:08 UTC

JNDI Authentication

Does anyone know what type of authentication Tomcat uses by default to
authenticate to an AD server using the JNDIRealm?

 

(I haven't specified any particular authentication type on either the
server (AD), or the client (Tomcat 6.0), it's working fine but I'm
wondering

If it's using SASL).

 

Regards,

Geoff.

==========================================================
For more information on the Television New Zealand Group, visit us
online at tvnz.co.nz 
==========================================================
CAUTION:  This e-mail and any attachment(s) contain information that
is intended to be read only by the named recipient(s).  This information
is not to be used or stored by any other person and/or organisation.

RE: JNDI Authentication

Posted by Geofrey Rainey <Ge...@tvnz.co.nz>.
Thank you :)

-----Original Message-----
From: Tim Funk [mailto:funkman@apache.org] 
Sent: Wednesday, 5 August 2009 12:50 a.m.
To: Tomcat Users List
Subject: Re: JNDI Authentication

http://java.sun.com/products/jndi/tutorial/ldap/security/auth.html
http://tomcat.apache.org/tomcat-6.0-doc/realm-howto.html#JNDIRealm

authentication	

A string specifying the type of authentication to use. "none", "simple",

"strong" or a provider specific definition can be used. If no value is 
given the providers default is used.

By default - authentication is null so the code is not called.

-Tim

Geofrey Rainey wrote:
> Im sorry, I don't understand your response.
> 
> I'm writing a Login Module to auth against an active directory server
> and know the authentication type is specified by:
> 
> Context.SECURITY_AUTHENTICATION
> 
> (Which can be something like "simple", for clear text, or SASL, etc)
> 
> Presumably the JNDIRealm sets this variable and I'm wondering what it
> is. In the Tomcat source code, I can see the following
(JNDIRealm.java),
> but don't know what the "authentication" is defined as?
> 
> if (authentication != null)
>             env.put(Context.SECURITY_AUTHENTICATION, authentication);
> 
> 
> 
> -----Original Message-----
> From: Tim Funk [mailto:funkman@apache.org] 
> Sent: Tuesday, 4 August 2009 11:55 p.m.
> To: Tomcat Users List
> Subject: Re: JNDI Authentication
> 
> JNDIRealm is based on communicating to an LDAP server. (Which is one
way
> 
> AD can communicate)
> 
> -Tim
> 
> Geofrey Rainey wrote:
>> Does anyone know what type of authentication Tomcat uses by default
to
>> authenticate to an AD server using the JNDIRealm?
>>
>>  
>>
>> (I haven't specified any particular authentication type on either the
>> server (AD), or the client (Tomcat 6.0), it's working fine but I'm
>> wondering
>>
>> If it's using SASL).
>>  
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 
> ==========================================================
> For more information on the Television New Zealand Group, visit us
> online at tvnz.co.nz 
> ==========================================================
> CAUTION:  This e-mail and any attachment(s) contain information that
> is intended to be read only by the named recipient(s).  This
information
> is not to be used or stored by any other person and/or organisation.
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 
> 
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

==========================================================
For more information on the Television New Zealand Group, visit us
online at tvnz.co.nz 
==========================================================
CAUTION:  This e-mail and any attachment(s) contain information that
is intended to be read only by the named recipient(s).  This information
is not to be used or stored by any other person and/or organisation.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: JNDI Authentication

Posted by Tim Funk <fu...@apache.org>.
http://java.sun.com/products/jndi/tutorial/ldap/security/auth.html
http://tomcat.apache.org/tomcat-6.0-doc/realm-howto.html#JNDIRealm

authentication	

A string specifying the type of authentication to use. "none", "simple", 
"strong" or a provider specific definition can be used. If no value is 
given the providers default is used.

By default - authentication is null so the code is not called.

-Tim

Geofrey Rainey wrote:
> Im sorry, I don't understand your response.
> 
> I'm writing a Login Module to auth against an active directory server
> and know the authentication type is specified by:
> 
> Context.SECURITY_AUTHENTICATION
> 
> (Which can be something like "simple", for clear text, or SASL, etc)
> 
> Presumably the JNDIRealm sets this variable and I'm wondering what it
> is. In the Tomcat source code, I can see the following (JNDIRealm.java),
> but don't know what the "authentication" is defined as?
> 
> if (authentication != null)
>             env.put(Context.SECURITY_AUTHENTICATION, authentication);
> 
> 
> 
> -----Original Message-----
> From: Tim Funk [mailto:funkman@apache.org] 
> Sent: Tuesday, 4 August 2009 11:55 p.m.
> To: Tomcat Users List
> Subject: Re: JNDI Authentication
> 
> JNDIRealm is based on communicating to an LDAP server. (Which is one way
> 
> AD can communicate)
> 
> -Tim
> 
> Geofrey Rainey wrote:
>> Does anyone know what type of authentication Tomcat uses by default to
>> authenticate to an AD server using the JNDIRealm?
>>
>>  
>>
>> (I haven't specified any particular authentication type on either the
>> server (AD), or the client (Tomcat 6.0), it's working fine but I'm
>> wondering
>>
>> If it's using SASL).
>>  
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 
> ==========================================================
> For more information on the Television New Zealand Group, visit us
> online at tvnz.co.nz 
> ==========================================================
> CAUTION:  This e-mail and any attachment(s) contain information that
> is intended to be read only by the named recipient(s).  This information
> is not to be used or stored by any other person and/or organisation.
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 
> 
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


RE: JNDI Authentication

Posted by Geofrey Rainey <Ge...@tvnz.co.nz>.
Im sorry, I don't understand your response.

I'm writing a Login Module to auth against an active directory server
and know the authentication type is specified by:

Context.SECURITY_AUTHENTICATION

(Which can be something like "simple", for clear text, or SASL, etc)

Presumably the JNDIRealm sets this variable and I'm wondering what it
is. In the Tomcat source code, I can see the following (JNDIRealm.java),
but don't know what the "authentication" is defined as?

if (authentication != null)
            env.put(Context.SECURITY_AUTHENTICATION, authentication);



-----Original Message-----
From: Tim Funk [mailto:funkman@apache.org] 
Sent: Tuesday, 4 August 2009 11:55 p.m.
To: Tomcat Users List
Subject: Re: JNDI Authentication

JNDIRealm is based on communicating to an LDAP server. (Which is one way

AD can communicate)

-Tim

Geofrey Rainey wrote:
> Does anyone know what type of authentication Tomcat uses by default to
> authenticate to an AD server using the JNDIRealm?
> 
>  
> 
> (I haven't specified any particular authentication type on either the
> server (AD), or the client (Tomcat 6.0), it's working fine but I'm
> wondering
> 
> If it's using SASL).
>  

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

==========================================================
For more information on the Television New Zealand Group, visit us
online at tvnz.co.nz 
==========================================================
CAUTION:  This e-mail and any attachment(s) contain information that
is intended to be read only by the named recipient(s).  This information
is not to be used or stored by any other person and/or organisation.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: JNDI Authentication

Posted by Tim Funk <fu...@apache.org>.
JNDIRealm is based on communicating to an LDAP server. (Which is one way 
AD can communicate)

-Tim

Geofrey Rainey wrote:
> Does anyone know what type of authentication Tomcat uses by default to
> authenticate to an AD server using the JNDIRealm?
> 
>  
> 
> (I haven't specified any particular authentication type on either the
> server (AD), or the client (Tomcat 6.0), it's working fine but I'm
> wondering
> 
> If it's using SASL).
>  

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org