Re: use password expiration with datasource realm

2013-09-16 Thread Neven Cvetkovic
On Sep 16, 2013 10:15 PM, "Stefan Frei" wrote: > > Hello Neven > Thanks for your reply. > I didnt find anything about security filter in the tomcat docs, is this a > common filter. > important would be that the filter triggers only when users perform a > j_security check, and not on every request.

Re: use password expiration with datasource realm

2013-09-16 Thread Stefan Frei
Hello Neven Thanks for your reply. I didnt find anything about security filter in the tomcat docs, is this a common filter. important would be that the filter triggers only when users perform a j_security check, and not on every request. should i use /j_security_check ? Cheers Stefan 2013/9/16

Re: use password expiration with datasource realm

2013-09-16 Thread Neven Cvetkovic
> The problem: > > > > The user should have a password which should change after a time (eg one > month). > > So how do i intercept a login request after j_security_check which > redirects the user to a „change your password“ page before redirecting him > (as it usually would be), to the url he req

use password expiration with datasource realm

2013-09-16 Thread Stefan Frei
Hello there Tomcat 7.0.42 Windows 7 64 bit Im searching for a solution here cause i didnt find anything on the internet about it. First i describe the current config: We use a datasource realm to authenticate users with sha encrypted passwords. Everything works well with this solu

Re: use password expiration with datasource realm

2013-09-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Stefan, On 9/16/13 2:02 PM, Stefan Frei wrote: > The user should have a password which should change after a time > (eg one month). > > So how do i intercept a login request after j_security_check which > redirects the user to a „change your passw

Re: Tomcat and LDAP (handling password expiration)

2012-01-06 Thread sigzero
On Fri, Jan 6, 2012 at 10:11 AM, André Warnier wrote: > sigzero wrote: >> >> The scenario is that Tomcat (6) is sitting on Windows and it talks to >> an LDAP server sitting on Linux (RHEL). What is the best way to handle >> the Tomcat LDAP account password expiring? I know that the password >> nee

Re: Tomcat and LDAP (handling password expiration)

2012-01-06 Thread André Warnier
sigzero wrote: The scenario is that Tomcat (6) is sitting on Windows and it talks to an LDAP server sitting on Linux (RHEL). What is the best way to handle the Tomcat LDAP account password expiring? I know that the password needs to change on the LDAP and the Tomcat server.xml file needs to be up

Re: Tomcat and LDAP (handling password expiration)

2012-01-06 Thread sigzero
On Fri, Jan 6, 2012 at 10:05 AM, Konstantin Kolinko wrote: > 2012/1/6 sigzero : >> The scenario is that Tomcat (6) is sitting on Windows and it talks to >> an LDAP server sitting on Linux (RHEL). What is the best way to handle >> the Tomcat LDAP account password expiring? I know that the password

Re: Tomcat and LDAP (handling password expiration)

2012-01-06 Thread Pid
On 06/01/2012 14:56, sigzero wrote: > The scenario is that Tomcat (6) is sitting on Windows and it talks to > an LDAP server sitting on Linux (RHEL). What is the best way to handle > the Tomcat LDAP account password expiring? I know that the password > needs to change on the LDAP and the Tomcat ser

Re: Tomcat and LDAP (handling password expiration)

2012-01-06 Thread Konstantin Kolinko
2012/1/6 sigzero : > The scenario is that Tomcat (6) is sitting on Windows and it talks to > an LDAP server sitting on Linux (RHEL). What is the best way to handle > the Tomcat LDAP account password expiring? I know that the password > needs to change on the LDAP and the Tomcat server.xml file need

Tomcat and LDAP (handling password expiration)

2012-01-06 Thread sigzero
The scenario is that Tomcat (6) is sitting on Windows and it talks to an LDAP server sitting on Linux (RHEL). What is the best way to handle the Tomcat LDAP account password expiring? I know that the password needs to change on the LDAP and the Tomcat server.xml file needs to be updated. I see no g

Re: Password Expiration

2011-11-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ono, http://catb.org/~esr/faqs/smart-questions.html On 11/17/11 10:09 PM, Ono Kensuke wrote: > Hello, > > We use OpenDS for users's authentication and implemented password > policy. We want to force users to change their password every three > mont

Password Expiration

2011-11-17 Thread Ono Kensuke
Hello, We use OpenDS for users's authentication and implemented password policy. We want to force users to change their password every three months. Tomcat Version :6.0.29 OS Version :Windows Server Std 2008 x64 OpenDS Version :2.2.0 What we did so far is the following: Server

Re: JNDIRealm and password expiration

2008-01-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andris, Andris Eiduks wrote: | We use JNDIRealm for users authentication from Tomcat again OpenLDAP. | But users doesn't get notifications about password expiration. | | It is possible for current solution (Tomcat and OpenLDAP) ? | Or we must c

JNDIRealm and password expiration

2008-01-16 Thread Andris Eiduks
Hi! We use JNDIRealm for users authentication from Tomcat again OpenLDAP. But users doesn't get notifications about password expiration. It is possible for current solution (Tomcat and OpenLDAP) ? Or we must create different functions in web application for passwords expiry dates sear

Re: Container-Managed Password Expiration/Strength enforcing?

2006-04-08 Thread Mark Thomas
Frank W. Zammetti wrote: > Hi Renny, > > I'm relatively sure Tomcat does not offer anything like this. I know at > work, we faced the same issues and developed a whole Security Framework > to sit on top of J2EE security. We're actually a Websphere shop, but > Websphere doesn't offer those capabi

Re: Container-Managed Password Expiration/Strength enforcing?

2006-04-07 Thread Frank W. Zammetti
Hi Renny, I'm relatively sure Tomcat does not offer anything like this. I know at work, we faced the same issues and developed a whole Security Framework to sit on top of J2EE security. We're actually a Websphere shop, but Websphere doesn't offer those capabilities either. That doesn't aut

Container-Managed Password Expiration/Strength enforcing?

2006-04-07 Thread fmiddleton
I am running Tomcat 5.5.12. I already use the sever's container-managed authentication mechanisms to require authentication for my web application users' credentials via forms. The users' ids and passwords are stored on an MySQL database. My question is, is there a way of configuring the server

Container-Managed Password Expiration/Strength enforcing?

2006-04-07 Thread fmiddleton
I am running Tomcat 5.5.12. I Use the sever's container-managed authentication mechanisms to require authentication for my web application users' credentials via forms. The users' ids and passwords are stored on an MySQL database. My question is, is there a way of configuring the server to requi