Re: Problem with proxy servers

Torgeir Veimo wrote:
> On Fri, 2005-01-14 at 12:34 +1100, Kornelis Sietsma wrote:
>>Hi folks,
>>
>>I've been having a problem with an application (xwiki) that uses
>>securityfilter.
>>
>>My work's ISP uses a pool of transparent http proxies for all web
>>access - and each proxy has a different IP address. Unfortunately
>>DefaultSecurityAccessManager uses request.getRemoteAddr() to hash the
>>username and password - which Tomcat returns as the IP address of the
>>proxy server.

Oops, got the class wrong - it's "DefaultPersistentLoginManager" that's 
at fault... sorry for any confusion

>>
>>This means every time I get assigned a new proxy, my username/password
>>hash fails, the authentication fails, and I get logged out.
> 
> Does it work as expected with standard Tomcat realms?
> 

I haven't had the time to test standard Tomcat realms - I'll try to when 
I can find some free time.

However there is a workaround, if I set 
DefaultPersistentLoginManager.useIP("false") (in xwiki this is 
controlled via the config parameter "xwiki.authentication.useip") the 
validation hash ignores the IP address, and then everything works.

- Korny


-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt