| 00:10.43 | *** join/#tomcat wstoddard (n=wstoddar@cpe-066-057-029-054.nc.res.rr.com) |
| 00:55.18 | *** join/#tomcat dorileo (n=dorileo@200.175.150.71.adsl.gvt.net.br) |
| 01:12.25 | *** join/#tomcat dreivier (n=dreivier@port-212-202-171-224.dynamic.qsc.de) |
| 01:30.05 | *** join/#tomcat yel (n=yel@87.78.113.184) |
| 02:06.28 | *** join/#tomcat dreivier (n=dreivier@port-212-202-43-109.dynamic.qsc.de) |
| 02:42.45 | puff | Yawn. |
| 03:01.38 | jasonb | Hi puff. Have a good Turkey Day? |
| 03:04.41 | jasonb | swente: Yes, it is possible to do that, but usually this means the webapp has its own custom authorization (part of the webapp, not part of Tomcat). |
| 03:08.09 | swente | jasonb: you mean, i have to build the authentication myself, but can use the userdatabase? |
| 03:09.43 | swente | ehm, anyway, it's already late |
| 03:11.51 | jasonb | swente: Usually developers just store the users and passwords however they want, in the db or whatever, but yeah, they do their own auth so that they have full control over when auth is performed, and what exactly happens with the request in all cases. |
| 03:13.01 | swente | mh ok. usually i also do my own auth-stuff, but i thought i could perhaps base on this. |
| 03:14.35 | jasonb | Well, Tomcat decides when to ask for authentication based on the session cookie.. if it's there, then the user is already authenticated. If it's not, it asks the user. So, you could theoretically play with the session cookie inside your servlet(s) or JSP(s) and perform redirects or whatever to pass control back to Tomcat's container auth.. if you want. |
| 03:14.46 | yel | hello everyone |
| 03:14.52 | jasonb | Hi yel. |
| 03:15.36 | yel | how your doing jasonb ? |
| 03:16.39 | jasonb | I'm doing well. Got a little time to relax this weekend, finally.. but now I feel it'll be a struggle to get anything done this weekend before it's over. |
| 03:17.14 | yel | i wish you good luck with it ;) |
| 03:17.39 | jasonb | Thanks. |
| 03:18.47 | swente | jasonb: anyway, thanks so far -- it's already "early in the morning", i'm off |
| 03:18.52 | yel | i have Tc now supporting ssl connection but sometime not :s |
| 03:19.09 | yel | its the same here have a good sleep ;) |
| 03:19.35 | jasonb | swente: Okay. You're welcome. See ya. |
| 03:19.47 | *** part/#tomcat swente (i=K1c3dhXn@hal.infinitumb.de) |
| 03:19.55 | jasonb | yel: Sometimes it doesn't work? |
| 03:20.21 | yel | yeah well when i try a https to my host it works |
| 03:20.55 | yel | but when a web application trys to vaildate a ticket using such connections it fails |
| 03:21.17 | yel | and i only find in my logs that no trusted certs was found |
| 03:22.04 | yel | its making me a bit confused with my little knowledge |
| 03:22.07 | jasonb | What does "validate a ticket" mean? |
| 03:23.40 | yel | let me just try to explain: well a user request a context which is restricted to authenticated users he get redirected to the central access server which is also an app deployed on tomcat |
| 03:23.54 | yel | he do login there and gets a Ticket |
| 03:24.09 | yel | and he gets redirected there where he comes from |
| 03:24.37 | yel | but this time he is carrying a ticket which should grant him access there |
| 03:24.51 | jasonb | That's all well past where the first-contact HTTPS connection happens, so I can't help with that. |
| 03:25.39 | yel | :s |
| 03:27.42 | yel | the important part is the last one :) |
| 03:29.29 | yel | juts don't care good night i'm off too (4:29 morning) |
| 03:35.57 | *** join/#tomcat IRCMonkey (n=chatzill@pool-207-68-50-44.norf.east.verizon.net) |
| 05:02.59 | *** join/#tomcat allens (n=ppop@60.48.162.141) |
| 05:37.07 | *** join/#tomcat FreemaniaX (n=Freemani@pcp0011117215pcs.elkrdg01.md.comcast.net) |
| 05:58.27 | *** join/#tomcat bdudney (n=bdudney@c-24-9-189-43.hsd1.co.comcast.net) [NETSPLIT VICTIM] |
| 05:58.27 | *** join/#tomcat Oleg (n=Oleg@dslb-084-059-219-001.pools.arcor-ip.net) [NETSPLIT VICTIM] |
| 05:58.27 | *** join/#tomcat Fennec (n=username@wikipedia/Fennec) [NETSPLIT VICTIM] |
| 05:58.27 | *** join/#tomcat unlord (n=nathan@va-67-76-89-240.dyn.sprint-hsd.net) [NETSPLIT VICTIM] |
| 05:58.27 | *** join/#tomcat bear (n=bear@pcp01380088pcs.levtwn01.pa.comcast.net) [NETSPLIT VICTIM] |