You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@shiro.apache.org by "Divyanshgarg (via GitHub)" <gi...@apache.org> on 2023/08/07 06:55:58 UTC
[GitHub] [shiro] Divyanshgarg commented on issue #1028: Tomcat 10.1 and Shiro 2.x giving javax.servlet Error
Divyanshgarg commented on issue #1028:
URL: https://github.com/apache/shiro/issues/1028#issuecomment-1667291605
> post your `shiro.ini` also? It looks like somet
Thanks for responding.
Please refer to below shiro.ini. I will try Jarviz tool and share my findings here.
`[main]
#fmconvergeRealm=com.finmechanics.fmconverge.security.ShiroRealm
fmconvergeRealm=com.finmechanics.fmconverge.security.ShiroEntityAwareRealm
fmAjaxFilter=com.finmechanics.fmcom.crypto.ShiroAjaxAuthenticator
fmAuthListener=com.finmechanics.fmconverge.security.FmShiroAuthListener
#fmconvergeRealm=com.finmechanics.fmconverge.security.FmcApacheLdapRealm
#sha256Matcher = org.apache.shiro.authc.credential.Sha256CredentialsMatcher
sha256Matcher = org.apache.shiro.authc.credential.SimpleCredentialsMatcher
#sha256Matcher.storedCredentialsHexEncoded = false
#sha256Matcher.hashIterations = 1024
fmconvergeRealm.credentialsMatcher = $sha256Matcher
securityManager.realms = $fmconvergeRealm
sessionManager = org.apache.shiro.web.session.mgt.DefaultWebSessionManager
#securityManager.sessionMode=native
# Use the configured native session manager:
securityManager.sessionManager = $sessionManager
# session timeout
sessionManager.globalSessionTimeout = 18000000
securityManager.authenticator.authenticationListeners=$fmAuthListener
shiro.loginUrl = /login.jsp
authc.successUrl = /index.jsp
logout.redirectUrl = /logout.jsp
sessionIdGenerator=com.finmechanics.fmcom.crypto.JavaUuidAndJvmRouteSessionIdGenerator
cookie = org.apache.shiro.web.servlet.SimpleCookie
cookie.name = FMCONVERGE
cookie.path = /fmconverge
securityManager.sessionManager.sessionIdCookie = $cookie
securityManager.sessionManager.sessionIdCookie.secure = false
securityManager.sessionManager.sessionDAO.sessionIdGenerator = $sessionIdGenerator
sessionManager.sessionIdUrlRewritingEnabled=false
[urls]
# The /login.jsp is not restricted to authenticated users (otherwise no one could log in!), but
# the 'authc' filter must still be specified for it so it can process that url's
# login submissions. It is 'smart' enough to allow those requests through as specified by the
# shiro.loginUrl above.
/login.jsp = authc
/logout = logout
/logout.jsp = anon
/css/** = anon
/js/** = anon
/extjs/** = anon
/dealmakerjs/** = anon
/javascripts/** = anon
/fonts/** = anon
/favicon.ico = anon
/error.jsp = anon
/images/** = anon
/services/** = anon
/dwr/call/** = fmAjaxFilter
/atmospherePushServlet/** = fmAjaxFilter
/** = authc
`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@shiro.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@shiro.apache.org
For additional commands, e-mail: issues-help@shiro.apache.org