Wall Papers
News Feed
Blogs
Event Photos
Screen Shots
Polls
Popular Content
Get GNU / Linux
Members
SearchSubmitted by M.Tag on Wed, 26/10/2005 - 10:55.
( categories: )
Salamoo Alikooo
I'm using Mandrake10.1, My intranet running on Tomcat 5.0.27.
- Can i use linux users permission while accessing my intranet through the web?
- if the intranet is pure html can i do this also?
- if this not supported by tomcat.Which web server can support?
Thanks.
hmm!
Do you mean that you want Tomcat to provide user authentication based on that system's /etc/passwd?
- I'm a code junkie security enthusiast
- http://pronco.manalaa.net
If so.. then you need to conf
If so.. then you need to configure a JAASRealm that uses UnixLoginModule for authentication....
RTFMs:
How? About?
plug in a matching auth database
i.e. an LDAP / PAM access module
- I'm a code junkie security enthusiast
- http://pronco.manalaa.net
That's what is JAAS for!
That's what is JAAS for!
Java Authentication and Authorization
I've noticed
- I'm a code junkie security enthusiast
- http://pronco.manalaa.net
Can i use linux users permiss
what's this supposed to mean?
It is not clear enough
It is not clear enough, Ok.
The wsbsite(intranet) contains many links which need to open a certain file in a certain directory which have a user permission.
i need to lock the directory with a username and password as linux users, and apply the user permission (owner,group,other)(r,w,e).
When click ask the client to a username and password, Apply directory permission[700](if the user not the owner of the directory will accessed so access denied).
Assume that:
-The website (intranet) was developed using jsp.
-The website (intranet) was developed using pure html.
can this make a difference???
Thanks
Mohammad Tag EL-Deen
ok.. i'll try to rearrange wh
ok.. i'll try to rearrange what you said...
what you have?
Let's imagine for the moment that you have a directory named "secret" owned by user "legaluser" and group "legalgroup"... directory permission bits are "700" (drwx------) so only the user "legaluser" has full access to this directory while neither his group "legalgroup" nor any others can do anything with it....
what you want to do?
You want to grant web access to this directory... so the scenario would be: some user enters a login and a password ...if they match "legaluser" and the correspoding password... access is granted...
behinde the scene...
so before thinking up a solution ...is that what you want?
Exactly
Exactly this is what i want to do.
So what about the solution now?.
Thanks
Mohammad Tag EL-Deen
a cgi script would try to "su
a cgi script would try to "su" to be "legaluser" using credentials submitted from user and then it would navigate, read certain files in the directory or do whatever.
btw this is riddled with security holes, so you should rethink your application design!