asked on

how to make JDBCRealm to check role only.

I posted the same question at web server section but no answer so far :( figure I try it here.

<Realm className="org.apache.catalina.realm.JDBCRealm" driverName="org.gjt.mm.mysql.Driver" connectionURL="jdbc:mysql://localhost/authority" connectionName="test" connectionPassword="test" userTable="users" userNameCol="user_name" userCredCol="user_pass" userRoleTable="user_roles" roleNameCol="role_name" />

Above is the typical Realm tag in Tomcat, as you can see it uses to verify user name, password and user roles. However, I have tomcat working with IIS and IIS took care of checking the NT user name and password, is there a way I can use JDBCRealm to just verify the role only?

bloodredsun

Are you looking to implement single sign-on with Windows and Tomcat?

fylix0000

ASKER

I'm using IIS to check the user name and password, which is basdically user's NT log on. Once IIS "authenticate" this, tomcat will use the JDBCRealm to "authorize" if this NT user name has the correct role before it let the user in.

Right now, the above Realm setup make Tomcat does both authentication and authorization process.

I albe to get IIS to check the user name and password but I do not know how to make Tomcat to check just the role only.

ASKER CERTIFIED SOLUTION

bloodredsun

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial