A Valve for Tomcat 4.0 that will use
org.cougaar.core.security.acl.auth.DualAuthenticator if it
exists and the System property
org.cougaar.lib.web.tomcat.enableAuth
is "true".
The server.xml should have within the <Context> section:
<Valve className="org.cougaar.lib.web.tomcat.AuthValve" realmName="Cougaar" authMethod="DIGEST"/>
Where realmName is the realm to use for authenticating users and
authMethod is the secondary method for authentication. It accepts any of the
standard methods available for authentication in servlet 2.3 spec.
Remember that the primary authentication is always CERT, so don't use that.
|