Setting Security in Tomcat 5.0

Hi,
I am new in JSP business. I developed an intranet based website. As required by the client there is no user-name/password stuff.
- All JSP pages are placed in one directory called "Dir1", some pages doing updates need to have restricted acccess.
- Role means Groups of Domain Controller, while the tomcat is running on another machine (obviously with-in the same domain).
- How can I access the domain role of the user (is request.isUserRole()) method is fine.
- If groups cannot be evaluated even then a setup based on domain user-name will be fine, want details?
Now I (infact client) want that only users belonging to a certain role can have access to some of the JSP pages (pages doing insert/update). How can I do this? I read about security settings in tomcat (web.xml etc.) but need more detail to understand/setup these. Any resource from where I get the complete details/example etc.
thanks in advance.

Hello,
you could try these links
http://jcifs.samba.org/src/docs/ntlmhttpauth.html#tomcat
http://www.jguru.com/faq/view.jsp?EID=1045412
I've not tried them myself though

Similar Messages

  • Not able to set security group without mail enabled as site collection admin using powershell in sharepoint online site - office 365

    not able to set security group without mail enabled as site collection admin using powershell in sharepoint online site - office 365?
    Any idea?

    after few days test in my lab, I can see that only email enabled group can be added as site collection admin using POWERSHELL.
    hope this helps who stuck like me!! :-)

  • Failed to set security on SQL Server registry key. Error: 2

    Hi,
    I have a Primary site (mixed mode) running SCCM 2007 SP1 for many months now with no issues.
    This site is made up of two Win 2008 sp2 servers sharing the SCCM roles:-
    SCCM01 - Site server, DP, RP, PXE and SQL2005 hosting the SCCM database
    SCCM02 – SUP, MP, FSP, SLP
    The SQL2005 on SCCM01 is running under a domain service account called
    domain\service_sccm which is also a sysadmin in SQL as is the SCCM02 server.
    In an effort to resolve the isse I have made this account a Domain Admin.
    I have also used this account to log onto SEC01 to run the Secondary Site installation and to be the SQL Service account.
    I'm now trying to add a Secondary Site on a Domain Controller called SEC01 (also Win2008 sp2) and on the same LAN as the SCCM01/02.
    This is where I get problems.
    I run the installation locally on the Sec Site server (DC) as a Domain Admin and the installation completes OK (all green ticks),
    the ComponentSetup.log and Pre-Reqs are all good as well however when I check the ConfigMgrSetup.log I see the below -
    Failed to set security on SQL Server registry key. Error: 2.
    <11-09-2010 22:46:59> SMS Setup full version is 4.00.6221.1000
    <11-09-2010 22:46:59> Successfully set security on Setup registry key.
    <11-09-2010 22:46:59> Failed to set security on SQL Server registry key. Error: 2
    <11-09-2010 22:46:59> Successfully set security on Identification registry key.
    <11-09-2010 22:46:59> Creating SMS Inbox Source registry key ...
    <11-09-2010 22:46:59> Installing SMS Site Component Manager ...
    <11-09-2010 22:46:59> Installing Site Component Manager under acct <NT AUTHORITY\SYSTEM> path <C:\Program Files (x86)\Microsoft
    Configuration Manager\bin\i386\sitecomp.exe>
    <11-09-2010 22:47:01> Started Site Component Manager service
    <11-09-2010 22:47:01> SMS Site Component Manager installation completed.
    <11-09-2010 22:47:01> Done with service installation
    Adding the PMP role to SEC01 also fails to install and no MPSetup or MPControl logs are created.
    WebDav and win2008 roles, features all added and server fully patched.
    Despooler.log on SCCM01 seems good and passing keys.
    Tried installing to default path and to shortened path such as C:\SCCM
    The new secondary site is listed in the console and an address can be added for the Secondary Site
    BITS Server Extensions and Remote Differential Compression Features are enabled.
    The Group memberships all appear ok:-
    SCCM01
    Local Admins    
    contains the sec site server SEC01, SCCM01, installation accounts
    SMS_SiteToSiteConnection_001              
    SEC01 (the sec site server)
    SMS_SiteSystemToSiteServerConnection_001                 
    SCCM02
    SEC01
    No Local Admins as a DC
    SMS_SiteToSiteConnection_002              
    SCCM01
    SMS_SiteSystemToSiteServerConnection_002     
    empty
    SQL 2005
    This has the account logged in during installation as a sysadmin
    SCCM02 is also sysadmin
    The fundamental issue appears to be that the SEC01$ server account is not being added to SQL Logins (and therefore SCCM database Roles)
    therefore the installation cannot complete.
    I have tried to manually add the SEC01 account to SQL Logins before installation of Sec Site but this did not work.
    Not sure if the fact that SEC01 is a DC may be a factor.
    Appreciate any help if anyone has seen this before or can suggest a resolution.
    Thanks

    After a lot of digging around and head scratching I eventually found the resolution.
    The original thread title Error turned out to be a bit of a red herring in that my failure to deploy Sec Sites came down to two separate issues seemingly unrelated to the error message of the thread title.
    The first part of the resolution was to manually create the SQL Server accounts for the Sec Site Servers and assign them to the smsdbrole_MP DB role to
    let the SQL side of the SCCM install complete a s these were not being created automatically.
    This then left the fact that that the installation of the Sec Site completed successfully according to the install logs in C:\ however the DP and MP would
    never install.
    The big clue was eventually contained in the mpfdm.log errors relating to
    **ERROR: Cannot find path for destination inbox SMS_AMT_PROXY_COMPONENT on server REGISTRY SMS_MP_FILE_DISPATCH_MANAGER 
    and
    **ERROR: Cannot find path for destination inbox Asset Intelligence KB Manager on server REGISTRY SMS_MP_FILE_DISPATCH_MANAGER 
    Thankfully the errors led me to these two blogs:
    http://myitforum.com/cs2/blogs/scassells/archive/2009/07/20/error-cannot-find-path-for-destination-inbox-sms-amt-proxy-component-on-server-registry.aspx
    and
    http://social.technet.microsoft.com/Forums/en-US/configmgrsetup/thread/5fcc53d4-8629-4b34-9eaa-6cb020eedc13/
    As it turned out the SCCM installation registry and folder creation does not complete and I had to manually enter the reg settings as detailed in the
    links above to complete the installation. Once I did as described everything worked a treat – all my MPs and DPs are 100% now.
    Solutions
    Add the following reg keys to each of your effected secondary sites.
    Inbox Fix
    Windows Registry Editor Version 5.00
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\MPFDM\Inboxes]
    "Asset Intelligence KB Manager"="E:\\Program Files\\Microsoft Configuration Manager\\inboxes\\AIKbMgr.box"
    "SMS_AMT_PROXY_COMPONENT"="E:\\Program Files\\Microsoft Configuration Manager\\inboxes\\amtproxy.box" 
     Asset Intelligence fix:
     Note: you will need to identify the next largest key value. 
    In my example it was key 49
     Windows Registry Editor Version 5.00
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Inbox Source\Inbox Definitions\49]
    "Inbox Name"="Asset Intelligence KB Manager"
    "Relative Path"="inboxes\\AIKbMgr.box"
    "NAL Path"=""
    "User Rights"=dword:00000000
    "Service Rights"=dword:00000004
    "Monitoring Enabled"=dword:00000001
    "Location Type"=dword:00000001
    "Guest Rights"=dword:00000001
    AMT registry Fix.
      Note: you will need to identify the next largest key value. 
    In my example it was key 50
    Windows Registry Editor Version 5.00
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Inbox Source\Inbox Definitions\50]
    "Inbox Name"="SMS_AMT_PROXY_COMPONENT"
    "Relative Path"="inboxes\\amtproxy.box"
    "NAL Path"=""
    "User Rights"=dword:00000000
    "Service Rights"=dword:00000004
    "Monitoring Enabled"=dword:00000001
    "Location Type"=dword:00000001
    "Guest Rights"=dword:00000001
    Big thanks to Shaun Cassells and John Marcum for these blogs

  • How to set security group as primary site collection admin and secondary site collection admin using powershell in sharepoint online site - office 365?

    How to set security group as primary site collection admin and secondary site collection admin using powershell in sharepoint online site - office 365?

    Hi,
    According to your description, my understanding is that you want to set security group as admin of primary and secondary site collection using PowerShell command in office 365.
    I suggest you can use the command below to set the group to site owner, then it will have the site collection admin permission.
    Set-SPOSite -Identity https://contoso.sharepoint.com/sites/site1 -Owner [email protected] -NoWait
    Here are some detailed articles for your reference:
    https://technet.microsoft.com/en-us/library/fp161394(v=office.15)
    http://blogs.realdolmen.com/experts/2013/08/16/managing-sharepoint-online-with-powershell/
    Thanks
    Best Regards
    Jerry Guo
    TechNet Community Support

  • Combine functionality Batch Create Multiple files and Set Security

    Greetings,
    Is there any way to combine the functionality of Acrobat Pro’s “Batch Create Multiple Files” (File (drop down) -> Create PDF -> Batch Create Multiple Files…) and running a batch process (Advanced -> Document Processing -> Batch Processing -> Batch Sequences -> Set Security)?
    Ideally I’d like to either:
    1)      Add the “Set Security” batch process to the “Batch Create Multiple Files … command located under the File (drop down) -> Create PDF
    or
    2)      Be able to create a batch process that first allows me to select the documents (Word, Excel, etc.) I want to convert into PDF files, then converts them, then runs the Set Security batch process.
    Right now it isn’t too much trouble to first “Create Multiple Files…” then run the batch process Set Security, but it would be nice to be able to do both with a single command.
    Any suggestions?
    Thank you,
    TPK

    I have uploaded the files and shared them.  These are the links
    Grade 11 Maths Standardisation Project Paper 2 2013.doc
    https://files.acrobat.com/preview/9694310d-ca7f-4919-883d-c53b36215d89
    Grade 11 Maths Standardisation Project Paper 2 Analysis Grid 2013.doc
    https://files.acrobat.com/preview/97da9e5f-d412-4d25-9bbc-d1a525d90826
    Grade 11 Maths Standardisation Project Paper 2 Diagram Sheet 2013.doc
    https://files.acrobat.com/preview/f50dd62e-af04-4060-85c5-fa81ce6803d8
    Grade 11 Maths Standardisation Project Paper 2 Formula Sheet 2013.doc
    https://files.acrobat.com/preview/7fc6007b-aaa6-4d65-9a8c-bf99818474a5
    Grade 11 Maths Standardisation Project Paper 2 Marking Guidelines 2013.doc
    https://files.acrobat.com/preview/b3a715bb-3683-48df-b0ec-3d17442275be
    Grade 11 Maths Standardisation Project Paper I Analysis Grid 2013.docx
    https://files.acrobat.com/preview/ab62e6b6-0261-434e-8a2f-382f74335685
    The first file is the problem file.  If you create this file separately, Acrobat will convert it perfectly.  But "Batch create multiple files" and the graphics are deconstructed on page 8

  • Can you set security on Collab folders or just projects?

    I know this is the Content Services forum, but I couldn't find a forum for Collab. Anyone know if you can set security to the folder level in Collab 4.0.2 or can you only set it to the project level?

    thanks for the clarification...there is no concept of setting security on actual project folders. Security is managed on an individual project basis.

  • Setting secure flag on weblogic (5.1) session cookie.

    Hello All,
              I need to set secure flag on weblogic session cookie. I am not able to
              find any property in weblogic.properties file to set the secure flag for
              session cookie.
              Does anybody has any idea how to achieve this.?
              Thanks
              Nitin
              

    The best way to reduce GC is to change you application to use less memory. Serious.
    There are a number of JVM options for GC. I can't tell you what will work best
    for your application.
    25 seconds is way too long for a GC. Is the OS paging? You may wish to invest
    in additional memory.
    Mike Reiche
    vijendran <[email protected]> wrote:
    Hi,
    I am running a load test which will simulate 100 users. when i tried
    to simulate i found that GC is happening often even though i set the
    heap to 512 MB., and that too some time it takes upto 25 secs. for a
    GC to complete. Please advise on how to increase the performance for
    more number of users (without clustering weblogic) and to avoid GC happening
    often.
    Regards
    Vijendran

  • How to set security for output merged PDF?

    If you wan to to set password or other security for your output merged PDF, how to do? there is the tutorial:http://www.kvisoft.com/tutorials/how-to-set-security-merged-pdf.html

    If you have a credit card, add it to your account, then you'll just be asked to verify your CVV code instead. You can remove it after.

  • Forcing Users to set Security Questions

    Hi All,
    Currently when a user joins the organization, the user can go to IdM user interface, login and set security questions. But this is an option only if user wants to use self service in IdM. So, it has been found that users are not setting it and it becaomes a pain when they call help desk for password change and help desk is not able to verify the user's identity because security questions are not set.
    Please share your thoughts how other organizations are handling this situation.
    Is there any way that we can force a user to set security questions when the user logs in first time?
    Regards,
    Gaurav

    Hello,
    In our Organization we did the following.
    Under the Security tab there is a Policy tab.
    There you should find a policy called: Default Identity Manager Account Policy.
    Under Secondary Authentication Policy Options make sure "Enforce Answer Policy at Login" is checked.
    In page help states:
    Select this option to enforce the authentication question policy when the user logs in to this interface.
    This solution works however it did become problematic while we had pass-thru authentication configured.
    All the best
    -IDMxml

  • How to install Twitter app without setting security questions?

    Hello! I recently registered a Twitter account. iOS 6 includes Twitter integration - great. When I navigate to Settings - Twitter and tap the Install button, a dialog shows up: "Improve your Apple ID security" and "Set security questions" blah blah. There are two buttons in the dialog, "Set questions" and "Cancel". If I tap Cancel, Twitter app download doesn't begin and Twitter icon disappears from my SpringBoard. If I tap "Set questions", I need to answer some stupid questions. If I leave answer boxes empty, I can't continue. I will not set any security questions for my Apple ID, that's for sure.
    How I can install Twitter app?

    I just encountered the same problem when I tried to download Twitter on my husband's new iPhone 5.  There was no problem when I installed Twitter on my iPhone 3GS yesterday :-( 
    You've probably seen by now that there are many, many people who are having problems with the 'Help improve Apple ID security' message - not confined to iPhone but also on iTunes, iPod Touch, iPad etc.
    I chose the 'Not Now' button on his iPhone 5 and the Twitter app wouldn't allow me to proceed ....
    Looks like Apple aren't in any hurry to fix this because people have been complaining about it for months (after all,  your post is more than 3 months old and the problem is still occurring).
    Were you ever able to activate Twitter on your iPhone 4S?
    Tricia

  • DPM 2012 R2 UR4 - DPM could not set security permissions on the replica or recovery point volume that was created.

    Hi All,
    I am running a fresh install of SCDPM 2012 R2 with a protection group that is backing up the 'C:\', Bare Metal and System State of some VMs. If i add any additional servers to the group since the first creation it returns the following error: 
    Modify protection group: System State & Bare Metal Recovery failed:
    Error 419: DPM could not set security permissions on the replica or recovery point volume that was created.
    Error details: The process cannot access the file because it is being used by another process
    Recommended action: Review the error details, take appropriate action and retry the operation.
    If i re-create the whole protection group it works fine.
    Could any one advise any further diagnostics I can do to try and locate the reason behind not being able to modify the group after the first creation? I can add new servers to other PGs without any issues.
    Thanks in advance,
    Dan

    If you are protecting any of the system state/BMR protection. Can you stop protection by deleting the older recovery points and then recreate the protection group.
    This thread mentions this to be a hardware issue, albeit with less information on what exact hardware issue:
    https://social.technet.microsoft.com/Forums/en-US/480679c2-1079-4847-ab38-5cc8f454ef86/error-419-dpm-could-not-set-security-permissions-on-the-replica-or-recovery-point-volume-that-was?forum=dataprotectionmanager
    Regards, Trinadh [MSFT] This posting is provided AS IS with no warranties, and confers no rights. If you found the reply helpful, please MARK IT AS ANSWER. Looking for source of information for DPM? http://blogs.technet.com/b/dpm/ http://technet.microsoft.com/en-in/library/hh758173.aspx

  • Set security at app level

    Hello, Is it possible to set security for a group at the application level so it automatically trickles down to the databases below (even new ones)? Thank you in advance.

    We do use incremental dimension builds and we haven't seemed to have a problem about errors not written to the error log.<BR><BR>There was a period when the write and append functions of the error logging were working backwards in MAXL, but that has long since been fixed.<BR><BR><b> import database 'credits'.'credits' dimensions <BR>from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day7" using server rules_file 'store'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day7" using server rules_file 'acct'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day7" using server rules_file 'depts'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day6" using server rules_file 'store'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day6" using server rules_file 'acct'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day6" using server rules_file 'depts'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day5" using server rules_file 'store'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day5" using server rules_file 'acct'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day5" using server rules_file 'depts'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day4" using server rules_file 'store'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day4" using server rules_file 'acct'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day4" using server rules_file 'depts'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day3" using server rules_file 'store'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day3" using server rules_file 'acct'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day3" using server rules_file 'depts'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day2" using server rules_file 'store'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day2" using server rules_file 'acct'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day2" using server rules_file 'depts'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day1" using server rules_file 'store'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day1" using server rules_file 'acct'<BR>, from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day1" using server rules_file 'depts'<BR>on error write to '3g.out';</b><BR><BR>This is a particularly nasty example of an incremental build, using daily data files to do the dimbuild but when we get errors, they seem to come from more than the last file parsed.<BR><BR>If the <b>on error write to</b> isn't working for you, try the <b>on error append to</b>. Sometime in the not so distant past, the write and append functions were flopped causing a bug of the first degree.<BR><BR>I'm no longer onitoring production processes, moving on to development and documentation, but I've written quite a bit of MAXL in the past and much prefer it to ESSCMD.

  • How do I set security on Leopard to prompt admin password before any changes - eg new instal , updates etc. Used to have this before recent upgrade to leopard

    How do I set security on Leopard to prompt admin password before any changes - eg new instal , updates etc.
    Used to have this before recent upgrade to Leopard and keen to keep this function

    Run from a standard account and not an admin one.

  • How do you set security on an IPad?

    I would like to set security on my IPad that prevents access to inappropriate sites.  I know how to Pass Code protect the entire IPad, but I want to prevent anyone accessing anything inappropriate.

    See Restrictions under Settings > General.

  • ON RESTORING 1601 ERROR COMING HOE WE SET SECURE SETTING FOR RESTORE AND UPDATE

    ON RESTORING 1601 ERROR COMING HOE WE SET SECURE SETTING FOR RESTORE AND UPDATE

    If you don't have a sim card in the phone, you won't be able to activate it. You can't activate any GSM iPhone without a valid sim card installed in the phone. The sim itself need not be activated, but it must be valid & present.

Maybe you are looking for

  • Can't Sync Calendar with Outlook 8310 OS 4.5 DM 4.7 BIS AT&T

    Please help!  Some background: I recently "upgraded" my device software from 4.2 to 4.5.  At about the same time, I got a gmail account and noticed I could sync my device calendar with Google's calendar.  Big mistake.  Every calendar entry was duplic

  • Unreachable statement error occured while using return statement.

    Consider this code class q25{      public static void main(String args[]){           amethod(args);      public static void amethod(String args[]){           String str;           try{                str = "Hello "+args[0];                System.out.

  • Missing thumbnail images

    I run iPhoto 6 on OSX 10.4.10. For some time, part of the thumbnail view of my library has not been appearing. What I get is a dotted outline where the image should be. It's in one particular, earlier section of my library but not all the earlier sec

  • Delivery Cost to be posted in full during the first GR itself

    Hi I have a requirement where in i need to create a new condition type "Delivery Cost" in the purchasing pricing procedure. This should post the fixed delivery cost as given in the PO completely during the first GR itself, irrespective of the partial

  • Applications not showing in privacy settings mountain lion

    I have found that since updating to Mountain, no apps are showing in the Privacy>Contacts settings sheet of the Security preferences and hence apps like Cobook and Alfred are unable to access contacts. Uninstalling and reinstalling the apps has not r