summaryrefslogtreecommitdiffstats
path: root/base/setup
diff options
context:
space:
mode:
authorEndi Sukma Dewata <edewata@redhat.com>2012-08-21 17:38:29 -0500
committerEndi Sukma Dewata <edewata@redhat.com>2012-09-05 10:09:41 -0500
commit8eb2eac080c2e9595b506f49f25d2c1718453bbc (patch)
treed63903229b737cf2e8127c02b67dfa62eeb4571a /base/setup
parent63ac9595b4b193200e9b7af94f0854361a70eec9 (diff)
downloadpki-8eb2eac080c2e9595b506f49f25d2c1718453bbc.tar.gz
pki-8eb2eac080c2e9595b506f49f25d2c1718453bbc.tar.xz
pki-8eb2eac080c2e9595b506f49f25d2c1718453bbc.zip
Added proxy realm.
CMS engine is a singleton and it's used by PKI realm to authenticate users accessing the subsystem. Since a Tomcat instance may contain multiple subsystems, each having separate realm, the PKI JAR links need to be moved into WEB-INF/lib so that they will run inside separate class loaders. Tomcat also requires that the authenticator and realm classes be available in common/lib. To address this a new package pki-tomcat.jar has been added. The package contains the authenticator and a proxy realm. When the subsystems start running, they will register their own realms into the proxy realms such that the authentications will be forwarded to the appropriate subsystems. Ticket #89
Diffstat (limited to 'base/setup')
-rw-r--r--base/setup/scripts/functions3
1 files changed, 2 insertions, 1 deletions
diff --git a/base/setup/scripts/functions b/base/setup/scripts/functions
index 20e5dcdff..7eacd7e1f 100644
--- a/base/setup/scripts/functions
+++ b/base/setup/scripts/functions
@@ -955,7 +955,8 @@ verify_symlinks()
[jss4.jar]=${jni_dir}/jss4.jar
[tomcatjss.jar]=/usr/share/java/tomcatjss.jar
# Dogtag 9 -> Dogtag 10
- [apache-commons-codec.jar]=/usr/share/java/commons-codec.jar)
+ [apache-commons-codec.jar]=/usr/share/java/commons-codec.jar
+ [pki-tomcat.jar]=/usr/share/java/pki/pki-tomcat.jar)
# '${pki_webapps_jar_dir}' symlinks
webapps_jar_symlinks=(