Re: Question about Tomcat/IIS and NTLM authentication

2008-01-23 Thread Gabe Wong
eborisow wrote: Gabe Wong wrote: Since the hasRole is being called, can you not do a super.hasRole against the stripped user name of the Principal. If so won't that suffice? Gabe, Yeah, I was thinking that. The hasRole though takes two parameters... a Principal and the role nam

Re: Question about Tomcat/IIS and NTLM authentication

2008-01-23 Thread eborisow
see if that works. Although, that won't help me in the future when I don't know the password. Thanks, Eric -- View this message in context: http://www.nabble.com/Question-about-Tomcat-IIS-and-NTLM-authentication-tp14997483p15054271.html Sent from t

Re: Question about Tomcat/IIS and NTLM authentication

2008-01-23 Thread Gabe Wong
eborisow wrote: Gabe Wong wrote: I guess I misunderstood your objective. You are not interested in manipulating the user name. You just want to check if the stripped user name is in a specific role? Gabe, Yeah, I guess that sums it up better than my original post. I thought that may

Re: Question about Tomcat/IIS and NTLM authentication

2008-01-23 Thread eborisow
aybe if I could just manipulate the principal name that I could just pass that along to hasRoles and everything would work similarly. If you have any other ideas on how I could do that, I would be grateful. Thanks, Eric -- View this message in context: http://www.nabble.com/Question-about-Tomc

Re: Question about Tomcat/IIS and NTLM authentication

2008-01-22 Thread Gabe Wong
eborisow wrote: mgainty wrote: NAMES: You cannot change to any names unknown to your (NTLM) authentication algorithm http://tomcat.apache.org/tomcat-5.5-doc/catalina/docs/api/org/apache/catalin a/realm/RealmBase.html#authenticate(java.lang.String,%20java.lang.String) Martin Martin,

Re: Question about Tomcat/IIS and NTLM authentication

2008-01-22 Thread eborisow
ttp://www.nabble.com/Question-about-Tomcat-IIS-and-NTLM-authentication-tp14997483p15033776.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: users@tomcat.apache.org To unsubsc

Re: Question about Tomcat/IIS and NTLM authentication

2008-01-22 Thread Martin Gainty
/tomcat-5.5-doc/catalina/docs/api/org/apache/catalin a/realm/RealmBase.html#authenticate(java.lang.String,%20java.lang.String) Martin - Original Message - From: "eborisow" <[EMAIL PROTECTED]> To: Sent: Tuesday, January 22, 2008 8:43 PM Subject: Re: Question about Tom

Re: Question about Tomcat/IIS and NTLM authentication

2008-01-22 Thread eborisow
n("Checking for role name: " + roleName); // need to create a new Principal here, I think boolean userHasRole = super.hasRole(newPrincipal, roleName); System.out.println("User has role: " + userHasRole); return userHasRole; } Thanks, Eric

Re: Question about Tomcat/IIS and NTLM authentication

2008-01-22 Thread Gabe Wong
eborisow wrote: Gabe Wong wrote: Could be how logging output is setup. The constructor may be created before output gets redirected elsewhere. Look in the other log files under the logs directory. Also is the realm configured in server.xml or context.xml? Gabe, Here's the thing. I

Re: Question about Tomcat/IIS and NTLM authentication

2008-01-22 Thread eborisow
's the thing. I also added logging (just System.out for right now) to the hasRole method and I saw the output from that method. The realm is defined in the server.xml. Thanks, Eric -- View this message in context: http://www.nabble.com/Question-about-Tomcat-IIS-and-NTLM-authentication-tp149974

Re: Question about Tomcat/IIS and NTLM authentication

2008-01-22 Thread Gabe Wong
eborisow wrote: Gabe Wong wrote: Check the syntax as it was just done on the fly. Here's the latest. I created a class that extends JNDIRealm and I can see some debug messages in my constructor, but I don't see my authenticate method getting invoked. I just wanted to see if I could

Re: Question about Tomcat/IIS and NTLM authentication

2008-01-22 Thread eborisow
System.out.println("Principal Name: " + principal.getName()); System.out.println("Finished authenticate"); return principal; } Does anyone see what I'm doing wrong? Thanks, Eric -- View this message in context: http://www.nabble.com/Question-

Re: Question about Tomcat/IIS and NTLM authentication

2008-01-21 Thread Gabe Wong
Mark Thomas wrote: eborisow wrote: If someone has been able to get this working and could provide some help, that would be great. Haven't tried it but you should be able to create a custom Realm by extending the existing JNDIRealm and manipulating the user name, probably by overriding the a

Re: Question about Tomcat/IIS and NTLM authentication

2008-01-21 Thread eborisow
. -- View this message in context: http://www.nabble.com/Question-about-Tomcat-IIS-and-NTLM-authentication-tp14997483p15006094.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail:

Re: Question about Tomcat/IIS and NTLM authentication

2008-01-21 Thread Mark Thomas
eborisow wrote: If someone has been able to get this working and could provide some help, that would be great. Haven't tried it but you should be able to create a custom Realm by extending the existing JNDIRealm and manipulating the user name, probably by overriding the authenticate() methods

Question about Tomcat/IIS and NTLM authentication

2008-01-21 Thread eborisow
this message in context: http://www.nabble.com/Question-about-Tomcat-IIS-and-NTLM-authentication-tp14997483p14997483.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: