Home / server / Questions / 439250
Accepted
stwissel
Asked: 2012-10-18 00:29:13 +0800 CST

Using Apache HTTP user in Tomcat?

  • 772

I need users to authenticate in Apache HTTP for some static resources (using mod_auth_openid. I also have a Tomcat application running. How can I accept the HTTP user as the Tomcat user, so the users don't need to login twice?

Clarification: I don't want to recheck credentials on the Tomcat side, but essentially trust that the user that has been identified by Apache HTTP is correct (whatever way that authentication happened - which is the main point: handing over username/password is **not* an option since there might not be a password, actually most likely there won't).

I want this to work with the Tomcat authentication system, but some pointer how it could work with a home grown authentication wouldn't harm.

apache-2.2

1 Answers

  1. Best Answer

    According to http://tomcat.apache.org/tomcat-5.5-doc/config/ajp.html just set the tomcatAuthentication to false to have the authorization propagated from the native webserver and used for authorization in Tomcat.

    • 1