You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by ngolehung84 <ng...@yahoo.com> on 2006/07/05 08:19:00 UTC

Authenticate Client!

Hi,
I'm using Tomcate 5.5.15. I have just configured SSL successful. Now I want
tthat the Server will authenticate the Client by Client Certificate or
Username/Password!
Does Tomcat support this mode? If yes, how can I do?
Thanks,
Hung. 
-- 
View this message in context: http://www.nabble.com/Authenticate-Client%21-tf1892887.html#a5176581
Sent from the Tomcat - User forum at Nabble.com.


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: Authenticate Client!

Posted by Jack <ja...@gmail.com>.
Yes it does there is some work involved. I have some instructions at:

http://jack.godau.googlepages.com/jbosscertificatesandopenssl

hope it helps
Jack...

On 05/07/06, ngolehung84 <ng...@yahoo.com> wrote:
>
> Hi,
> I'm using Tomcate 5.5.15. I have just configured SSL successful. Now I want
> tthat the Server will authenticate the Client by Client Certificate or
> Username/Password!
> Does Tomcat support this mode? If yes, how can I do?
> Thanks,
> Hung.
> --
> View this message in context: http://www.nabble.com/Authenticate-Client%21-tf1892887.html#a5176581
> Sent from the Tomcat - User forum at Nabble.com.
>
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>


-- 
Cheers
Jack...

The claim "natural" is not synonymous with safe.

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: Authenticate Client!

Posted by navaneethan loganathan <na...@gmail.com>.
Hi,

I am sorry for that.. Since I am new to this group, I was not aware of that.
I will follow your advise and do accordingly in future.

Thanks
Navin.

On 7/5/06, Mark Thomas <ma...@apache.org> wrote:
>
> When starting a new thread (ie sending a message to the list about a
> new topic) please do not reply to an existing message and change the
> subject line. To many of the list archiving services and mail clients
> used by list subscribers this  makes your new message appear as part
> of the old thread. This makes it harder for other users to find
> relevant information when searching the lists.
>
> This is known as thread hijacking and is behaviour that is frowned
> upon on this list. Frequent offenders will be removed from the list.
> It should also be noted that many list subscribers automatically
> ignore any messages that hijack another thread.
>
> The correct procedure is to create a new message with a new subject.
> This will start a new thread.
>
> Mark
> tomcat-user-owner
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>

Re: Authenticate Client!

Posted by Mark Thomas <ma...@apache.org>.
When starting a new thread (ie sending a message to the list about a
new topic) please do not reply to an existing message and change the
subject line. To many of the list archiving services and mail clients
used by list subscribers this  makes your new message appear as part
of the old thread. This makes it harder for other users to find
relevant information when searching the lists.

This is known as thread hijacking and is behaviour that is frowned
upon on this list. Frequent offenders will be removed from the list.
It should also be noted that many list subscribers automatically
ignore any messages that hijack another thread.

The correct procedure is to create a new message with a new subject.
This will start a new thread.

Mark
tomcat-user-owner

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: Authenticate Client!

Posted by navaneethan loganathan <na...@gmail.com>.
Hi Hung,

I am trying to install SSL certificate with Tomcat 5.5.15. I obtained the
private key from verisign.I am trying to configur it in Tomcat. At present
Tomcat5.5.15+apache2 with mod_jk connector(ajp13) is working very fine. I am
able to browse my site with http://testserver.  without specifying the port
number. After installing the SSL certificate as per verisign document using
the keytool command, I have modified the server.xml file with port number
443.

But still I am unable to browse my site with https://testserver.

Any clue please..

Navin.

On 7/4/06, ngolehung84 <ng...@yahoo.com> wrote:
>
>
> Hi,
> I'm using Tomcate 5.5.15. I have just configured SSL successful. Now I
> want
> tthat the Server will authenticate the Client by Client Certificate or
> Username/Password!
> Does Tomcat support this mode? If yes, how can I do?
> Thanks,
> Hung.
> --
> View this message in context:
> http://www.nabble.com/Authenticate-Client%21-tf1892887.html#a5176581
> Sent from the Tomcat - User forum at Nabble.com.
>
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>

Re: Authenticate Client!

Posted by Mark Thomas <ma...@apache.org>.
ngolehung84 wrote:
> Hi,
> I'm using Tomcate 5.5.15. I have just configured SSL successful. Now I want
> tthat the Server will authenticate the Client by Client Certificate or
> Username/Password!

Each web application can only use one authentication method. The
methods supported are BASIC, DIGEST, FORM and CLIENT-CERT. There is no
support for multiple authentication methods.

You might be able to do something with multiple web applications,
single sign on and some custom code but I have never tried it.

Mark

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org