SSO on Apache: not logged in to Ivy but in tomcat?

Alexis — Wed, 13 May 2015 09:04:14 -0400

Hello Ivy-Comunity!

When logged in to Apache (and to Tomcat) the User is not taken by Ivy.

In a testing environment I have the following constellation:

Linux environment with Ivy 5.1.3 attached to AD
Apache Server with Kerberos Login attached to the same AD
Ajp-Connector to Ivy-Tomcat
A jsp testing Page in the Ivy-Environment (applicationHome on the Application-wf-Page)

So this Page shows me by asking request.getRemoteUser() that this User is logged in: Hans.Tester@TESTENV.LOCAL and a HTTP Session request.getSession().getId(). But getting the Ivy-User by ivySession.getSessionUser() returns null. Except when Logged in manualy the result Hans.Tester for the Ivy-Session.

So why is that? Or how can I make shure, that the Session is taken correctly by ivy?

First guess is, that the username comes with the Environment (TESTENV.LOCAL). If it is the Issue, how to shut that down?

With further investigation I found out more:

In a Windows-Environment under IIS the UserName of the Tomcat-Session is in this format: TESTENV\Alexis.Suter
The Ivy-Session is not saved into Tomcat-request. (When only logging in to Ivy)

Thanks in advance!

Questions Tagged With sso

SSO on Apache: not logged in to Ivy but in tomcat?