You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by ma...@apache.org on 2021/09/27 16:49:10 UTC

[tomcat] branch 9.0.x updated: Clarify the JASPIC docs

This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/9.0.x by this push:
     new 7be169d  Clarify the JASPIC docs
7be169d is described below

commit 7be169d0d560238d0d9321ccc42e76d671b3c054
Author: Mark Thomas <ma...@apache.org>
AuthorDate: Mon Sep 27 17:44:26 2021 +0100

    Clarify the JASPIC docs
---
 webapps/docs/changelog.xml     |  8 ++++++++
 webapps/docs/config/jaspic.xml | 21 +++++++++++++++++----
 2 files changed, 25 insertions(+), 4 deletions(-)

diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index c22d7e7..9d83c14 100644
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -160,6 +160,14 @@
       </fix>
     </changelog>
   </subsection>
+  <subsection name="Web applications">
+    <changelog>
+      <fix>
+        Clarify the JASPIC configuration options in the documentation web
+        application. (markt)
+      </fix>
+    </changelog>
+  </subsection>
 </section>
 <section name="Tomcat 9.0.53 (remm)" rtext="2021-09-10">
   <subsection name="Catalina">
diff --git a/webapps/docs/config/jaspic.xml b/webapps/docs/config/jaspic.xml
index 1adf68d..15a611f 100644
--- a/webapps/docs/config/jaspic.xml
+++ b/webapps/docs/config/jaspic.xml
@@ -39,10 +39,23 @@
   implementation is primarily intended to enable the integration of 3rd party
   JASPIC authentication implementations with Tomcat.</p>
 
-  <p>JASPIC may be configured dynamically by an application or statically via
-  the <code>$CATALINA_BASE/conf/jaspic-providers.xml</code> configuration file.
-  If present, a JASPIC configuration will over-ride any
-  <code>&lt;login-config&gt;</code> present in <code>web.xml</code>.</p>
+  <p>JASPIC may be configured in one of two ways:</p>
+  <ul>
+    <li>At the container level via the static configuration file
+        <code>$CATALINA_BASE/conf/jaspic-providers.xml</code>. With this
+        approach all required classes must be visible to Tomcat's Common class
+        loader which normally means placing a JAR in
+        <code>$CATALINA_BASE/lib</code>.</li>
+     <li>At the web application level via dynamic configuration using the JASPIC
+         API. With this approach all required classes must be visible to the web
+         application class loader which normally means placing a JAR in the web
+         application's <code>WEB-INF/lib</code> directory.</li>
+  </ul>
+
+  <p>Users should be aware that if the static JASPIC configuration file
+     configures JASPIC for a given web application then the JASPIC configuration
+     will take precendence over any <code>&lt;login-config&gt;</code> present in
+     the web application's <code>WEB-INF/web.xml</code> file.</p>
 
 </section>
 

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org