You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Randeep <ra...@gmail.com> on 2014/07/07 13:02:49 UTC

sso integration with tomcat

Hi all,

We are trying to implement a single sign on tool with our website.

Our architecture is as follows.

httpd 2.2 (front end) + mod_jk + apache_tomcat 7.0.53 (back end)
we have 5 web applications in the webapps
we are using centos 5.4

We are currently testing with josso. (if you know something better please
let me know)

we are testing with josso's inbuilt sample app.
in tomcat/lib/*josso-gateway-stores.xml*
I have configured as follows.

    <db-istore:jdbc-store
            id="josso-identity-store"
            driverName="com.mysql.jdbc.Driver"
            connectionURL="jdbc:mysql://
stagingxyz.us-east-1.rds.amazonaws.com:3306/josso"
            connectionName="root"
            connectionPassword="abcde"
            userQueryString="SELECT LOGIN AS NAME FROM JOSSO_USER WHERE
LOGIN = ?"
            rolesQueryString="SELECT NAME AS ROLE FROM JOSSO_USER_ROLE
WHERE LOGIN = ?"
            credentialsQueryString="SELECT LOGIN AS USERNAME, PASSWORD FROM
JOSSO_USER WHERE LOGIN = ?"
            userPropertiesQueryString="SELECT NAME, VALUE FROM
JOSSO_USER_PROPERTY WHERE LOGIN = ?"
            resetCredentialDml="UPDATE JOSSO_USER SET PASSWORD = ? WHERE
LOGIN = ?"
            relayCredentialQueryString="SELECT LOGIN FROM JOSSO_USER WHERE
#?# = ?"
            certificateCredentialsQueryString="SELECT CERTIFICATE AS
USERCERTIFICATE FROM JOSSO_USER_CERTIFICATE WHERE CN = ?"
                        uidQueryString="SELECT LOGIN FROM
JOSSO_USER_CERTIFICATE WHERE CERTIFICATE = ?"
            />

But I can see db-sstore and db-astore do I need to configure these too? I
have followed this tutorial
http://www.josso.org/confluence/display/JOSSO1/Database+Setup

it doesnt have schema for session and other tables.

in josso-gateway-config.xml
I have added
    <!-- Identity, Session and Assertion Stores configuration -->
    <s:import resource="josso-gateway-stores.xml" />


as we are using plain text for testing I have configured
*josso-gateway-auth.xml
as follows:*
    <basic-authscheme:basic-auth-scheme
            id="josso-basic-authentication"
            ignorePasswordCase="false"
            ignoreUserCase="false">

but the problem is when we try to login using the partner app(In this
parter app i have configured web.xml and redirect pages accordingly)
it is not taking the credentials from the database. it is taking the
default ones only.

Kindly advice.
Please let me know if I have to provide any other details.

-- 
Randeep
Mob: +919880050349[B'lore]
http://twitter.com/Randeeppr
http://in.linkedin.com/in/randeeppr

[image: --]
Randeep Raman
[image: http://]about.me/Randeeppr
<http://about.me/Randeeppr>

Re: sso integration with tomcat

Posted by Mark Thomas <ma...@apache.org>.
On 07/07/2014 12:02, Randeep wrote:
> Hi all,
> 
> We are trying to implement a single sign on tool with our website.
> 
> Our architecture is as follows.
> 
> httpd 2.2 (front end) + mod_jk + apache_tomcat 7.0.53 (back end)
> we have 5 web applications in the webapps
> we are using centos 5.4
> 
> We are currently testing with josso. (if you know something better please
> let me know)

Don't know if it is better, but quite a few of the SSO deployments I
have come across have used CAS:
http://www.jasig.org/cas

You might want to try the JOSSO support forum.

Mark


> we are testing with josso's inbuilt sample app.
> in tomcat/lib/*josso-gateway-stores.xml*
> I have configured as follows.
> 
>     <db-istore:jdbc-store
>             id="josso-identity-store"
>             driverName="com.mysql.jdbc.Driver"
>             connectionURL="jdbc:mysql://
> stagingxyz.us-east-1.rds.amazonaws.com:3306/josso"
>             connectionName="root"
>             connectionPassword="abcde"
>             userQueryString="SELECT LOGIN AS NAME FROM JOSSO_USER WHERE
> LOGIN = ?"
>             rolesQueryString="SELECT NAME AS ROLE FROM JOSSO_USER_ROLE
> WHERE LOGIN = ?"
>             credentialsQueryString="SELECT LOGIN AS USERNAME, PASSWORD FROM
> JOSSO_USER WHERE LOGIN = ?"
>             userPropertiesQueryString="SELECT NAME, VALUE FROM
> JOSSO_USER_PROPERTY WHERE LOGIN = ?"
>             resetCredentialDml="UPDATE JOSSO_USER SET PASSWORD = ? WHERE
> LOGIN = ?"
>             relayCredentialQueryString="SELECT LOGIN FROM JOSSO_USER WHERE
> #?# = ?"
>             certificateCredentialsQueryString="SELECT CERTIFICATE AS
> USERCERTIFICATE FROM JOSSO_USER_CERTIFICATE WHERE CN = ?"
>                         uidQueryString="SELECT LOGIN FROM
> JOSSO_USER_CERTIFICATE WHERE CERTIFICATE = ?"
>             />
> 
> But I can see db-sstore and db-astore do I need to configure these too? I
> have followed this tutorial
> http://www.josso.org/confluence/display/JOSSO1/Database+Setup
> 
> it doesnt have schema for session and other tables.
> 
> in josso-gateway-config.xml
> I have added
>     <!-- Identity, Session and Assertion Stores configuration -->
>     <s:import resource="josso-gateway-stores.xml" />
> 
> 
> as we are using plain text for testing I have configured
> *josso-gateway-auth.xml
> as follows:*
>     <basic-authscheme:basic-auth-scheme
>             id="josso-basic-authentication"
>             ignorePasswordCase="false"
>             ignoreUserCase="false">
> 
> but the problem is when we try to login using the partner app(In this
> parter app i have configured web.xml and redirect pages accordingly)
> it is not taking the credentials from the database. it is taking the
> default ones only.
> 
> Kindly advice.
> Please let me know if I have to provide any other details.
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org