Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • authenticationDuration - length of time in minutes that the authentication method associated with this login handler is active; default: 30 minutes
  • protectedServletPath - context-relative path to the Servlet protected by REMOTE authentication; default is /<CONTEXT_PATH>/Authn/RemoteUser

Additionally the login handler must contain one or more <AuthenticationMethod> elements whose content is the authentication method(s) serviced by the login handler.

...

Apache httpd w/ Basic Authentication + Apache Tomcat

  1. Create a user/password file using the htpasswd command:

    No Format
    htpasswd -s /PATH/TO/FILE USERNAME
  2. Add the following location directive to your Apache httpd configuration

    Code Block
    titleExample Apache httpd Location Directive
    
    <Location /<CONTEXT_PATH>/Authn/RemoteUser>
        AuthType Basic
        AuthName "Identity Provider Authentication"
        AuthUserFile /PATH/TO/USER/FILE
        require valid-user
    </Location>
    
  3. Add the following attribute to your AJP connector in the Tomcat server.xml file: tomcatAuthentication="false"

    Code Block
    xml
    xml
    titleExample Tomcat AJP Connector
    
    <Connector address="127.0.0.1"
               port="8009"
               protocol="AJP/1.3"
               enableLookups="false"
               tomcatAuthentication="false" />