- 鐢ㄦ潵鎸囧畾鍙椾繚鎶ょ殑web璧勬簮浠ュ強(qiáng)瀵瑰叾鍙互璁塊棶鐨勮鑹層?br />
| 瀛愬厓绱?/strong> | 鎻忚堪 |
| <web-resource-collection> | 澹版槑鍙椾繚鎶ょ殑web璧勬簮 |
| <web-resource-name> | 鎸囧畾鍙椾繚鎶よ祫婧愮殑鍚嶅瓧錛屾槸<web-resource-collection>鐨勫瓙鍏冪礌 |
| <url-pattern> | 鍙椾繚鎶ょ殑URL璺緞錛屾槸<web-resource-collection>鐨勫瓙鍏冪礌 |
| <http-method> | 鎸囧畾鍙椾繚鎶ょ殑HTTP璁塊棶鏂規(guī)硶錛堝寘鎷珼ELETE,GET,POST鍜孭UT錛夛紝濡傛灉涓嶅畾涔夛紝琛ㄧず鎵鏈夌殑鏂規(guī)硶閮藉彈淇濇姢錛屾槸<web-resource-collection>鐨勫瓙鍏冪礌 |
| <auth-constraint> | 鎸囧畾鍙椾繚鎶よ祫婧愬畨鍏ㄩ檺鍒?/td> |
| <role-name> | 鎸囧畾鍙互璁塊棶鍙椾繚鎶よ祫婧愮殑瑙掕壊鍚嶏紝涓?lt;auth-constraint>鐨勫瓙鍏冪礌 |
<login-config>
- 鐢ㄦ潵鎸囧畾瀹㈡埛鍦ㄨ闂彈淇濇姢鐨剋eb璧勬簮鏃訛紝緋葷粺瀵瑰鎴瘋繘琛岄獙璇佺殑綾誨瀷銆?br />
| 瀛愬厓绱?/strong> | 鎻忚堪 |
| <auth-method> | 緋葷粺瀵瑰鎴烽獙璇佺殑綾誨瀷錛屾湁BASIC,DIGEST,FORM3縐?/td> |
| <realm-name> | 璁懼畾浣跨敤鐨凴ealm鍚嶇О |
| <form-login-config> | 浣跨敤FORM楠岃瘉鏃剁殑閰嶇疆淇℃伅 |
| <form-login-page> | 浣跨敤FORM楠岃瘉鏃剁殑鐧誨綍欏甸潰錛屾槸<form-login-config>鐨勫瓙鍏冪礌 |
| <form-error-page> | 浣跨敤FORM楠岃瘉鏃剁殑閿欒澶勭悊欏甸潰錛屾槸<form-login-config>鐨勫瓙鍏冪礌 |
<security-role>
- 鐢ㄦ潵澹版槑web搴旂敤鐨勮鑹插悕縐般?br />
| 瀛愬厓绱?/strong> | 鎻忚堪 |
| <description> | 瀵瑰綋鍓嶇殑<security-role>鍏冪礌榪涜鎻忚堪 |
| <role-name> | 寮曠敤鐨勮鑹插悕縐?/td> |
]]>
鎵撳紑tomcat瀹夎鐩綍涓嬬殑conf/web.xml錛?br /> 1.鎵懼埌SSI servlet閮ㄥ垎錛屽皢娉ㄩ噴鍘繪帀錛?br /> 2.鎵懼埌SSI servlet-mapping閮ㄥ垎錛屽皢娉ㄩ噴鍘繪帀錛?br /> 涓縐嶆浛鎹㈡柟娉曟槸錛屽彲浠ュ皢SSI鐨刦ilter閮ㄥ垎鐨勬敞閲婂幓鎺夛紝浣嗘槸涓嶈兘涓よ呴兘鍘繪帀娉ㄩ噴錛?br />
鍚姩tomcat錛岃繖鏃跺彲鑳戒細(xì)鎶ュ涓嬮敊錛?br />
java.lang.SecurityException: Servlet of class org.apache.catalina.ssi.SSIServlet is privileged and瑙ｅ喅鏂規(guī)硶鏄細(xì)
cannot be loaded by this web application
鎵撳紑tomcat瀹夎鐩綍涓嬬殑conf/context.xml錛屽皢<context>鏀逛負(fù)<Context privileged="true">銆?br />
鐒跺悗錛屽啀鍚姩tomcat錛屽氨姝ｅ父浜?jiǎn)銆?br /> 鑷充簬涓枃涔辯爜鐨勯棶棰橈紝鎴戣繖閲屾祴璇曚笅鏉ワ紝濂藉儚鍦╳eb.xml閲岀殑servlet涓嬩笉鐢ㄥ鍔爄nputEncoding鍜宱utputEncoding鍙傛暟涔熸病闂銆?br />
]]>
鐩爣:鐢ㄦ埛Login涓嬈′箣鍚?鍙互璁塊棶鍚屼竴Server涓婄殑涓嶅悓W(xué)ebapp, 鍏蜂綋瀹炵幇涓婇噰鐢═omcat鐨凷ingle Sign-On瀹炵幇. 涓昏鍒嗕負(fù)涓嬮潰鍑犱釜姝ラ:
淇敼Tomcat conf/server.xml錛屾墦寮SSO鏀寔
<Host> 鑺傜偣涓嬪鍔犱竴涓猇alve鑺傜偣
<Valve className="org.apache.catalina.authenticator.SingleSignOn"
debug="0" requireReauthentication="false"/>
</Host>
container璁よ瘉realm錛?user銆乺ole銆乻erver.xml鐨?lt;Realm...>璁劇疆
tomcat鐨勮璇佹満鍒舵湁2涓绱狅細(xì) user 鍜?role.
user 鏄尯鍒竴涓釜鐢ㄦ埛鐨勫敮涓璇嗗埆浜?jiǎn)銆?br /> role 灝辨槸涓浜涙娊璞＄殑鏉冮檺綰у埆錛屾瘮濡?#8220;admin”銆?#8220;manager”銆?#8220;member”銆?#8220;guest”絳夌瓑錛岄兘鏄彲浠ヨ嚜宸卞畾涔夌殑.涓涓猽ser鍙互鎷ユ湁澶氱role.
“鍙槸tomcat鎬庝箞鍘繪嬁鍒版垜鐨剈ser/role淇℃伅鍛紵鎴戠殑榪欎簺鏁版嵁閮藉湪鏁版嵁搴撻噷闃匡紵”
鍙互鍦╰omcat鐨剆erver.xml閲岀敤 <Realm> tag鏉ヨ鍙栬繖浜涗俊鎭紝騫朵笖tomcat鎻愪緵浜?銆?縐嶇幇鎴愮殑Realm瀹炵幇錛屽叾涓湁浠庢枃浠墮噷璇葷殑錛屾湁浠嶫DBC璇葷殑錛屾湁浠嶥ataSource璇葷殑錛屼篃鏈変粠LDAP璇葷殑銆傚叿浣揜ealm鐨勫啓娉曪紝鍜屾彁渚涚殑鍑犵Realm鐨勯厤緗柟娉曪紝鍙互鍙傝僼omcat鑷繁鐨勬枃妗ｏ紝鍦ㄦ涓嶄綔緇嗚堪銆?(鎶妕omcat鑷甫鐨剋ebapp: tomcat-docs.war 灞曞紑錛岀湅閲岄潰鐨?config/realm.html) 濡傛灉榪炶繖浜涚幇鎴愮殑閰嶇疆閮戒笉鑳芥弧瓚充綘鐨勮姹傜殑璇濓紝閭ｄ篃鍙互鑰冭檻鑷繁鍐欎竴涓猂ealm鐨勫疄鐜扮被鏉ユ弧瓚沖叿浣撹姹傘?br /> 涓嬮潰涓句竴涓狫DBC鐨凴ealm鐨勯厤緗緥瀛愮湅涓涓嬶細(xì)
<Realm銆 className="org.apache.catalina.realm.JDBCRealm"銆 debug="99"
driverName="your.jdbc.driver.here"
connectionURL="your.jdbc.url.here"
connectionName="test"
connectionPassword="test"
userTable="users"
userNameCol="user_name"
userCredCol="user_pass"
userRoleTable="user_roles"
roleNameCol="role_name" />
webapp浣跨敤SSO
鍛婅瘔tomcat榪欎釜webapp瑕侀氳繃container鐨勮璇併?br /> 鍏蜂綋鍋氭硶錛?鍦╳eb.xml閲岄潰鍔犱笂濡備笅鐨勯厤緗細(xì)
<security-constraint>
<web-resource-collection>
<web-resource-name>http://www.bt285.cn銆 BT涓嬭澆 </web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<!-- role name 鎸囧畾鍝釜role鍙互璁塊棶,鍙互涓哄涓猺ole錛屽涓や釜緗戠珯錛歨ttp://www.5a520.cn http://www.feng123.com銆 -->
<role-name>intrauser</role-name>
</auth-constraint>
</security-constraint>
閫夋嫨涓縐嶈璇佹柟娉?br /> 鍦╳eb.xml閲岄潰鍔犱笂濡備笅鐨勯厤緗細(xì)
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>Intra Web Application</realm-name>
</login-config>
<security-role>
<description>The role that is required to access intrasites</description>
<role-name>intrauser</role-name>
</security-role>
榪欓噷鏈?涓鐐癸細(xì)
auth-method
涓句緥涓轟簡(jiǎn)綆鍗曠敤浜?jiǎn)鏈鍩烘湰鐨勪竴縐岯ASIC銆傝嫢浣跨敤BASIC鏂瑰紡錛屽綋浣犲幓璁塊棶鍙椾繚鎶よ璇佺殑璧勬簮鏃訛紝嫻忚鍣ㄤ細(xì)寮瑰嚭涓涓皬紿楀彛璁╀綘杈撳叆鐢ㄦ埛鍚嶅拰瀵嗙爜銆傦紙灝卞儚鎴戜滑璁塊棶ioffice鏃訛紝絎竴嬈″脊鍑烘潵鐨勯偅涓璇佺獥鍙ｏ級(jí)鍏朵粬榪樻湁鍑犵璁よ瘉鏂瑰紡濡傦細(xì)FORM銆丏IGEST銆丆LIENT-CERT銆傚叾涓璅ORM鏄彲浠ヨ嚜宸卞啓login鐢婚潰鐨勶紝褰撶劧html鐨刦orm鍐呭鏈変簺瑙勫畾錛堣絎﹀悎j2ee鍜宑ontainer鐨勮姹傚槢錛夈?DIGEST鏄竴縐嶅姞瀵嗙殑浼犺緭錛岃孋LIENT-CERT娌℃湁鏌ヨ繃錛屾湁鍏磋叮鍙互鍘繪煡涓涓嬨?br />
realm-name
榪欎釜realm-name鏄繖涓獁ebapp鐨勮璇乺ealm鍚嶏紝娉ㄦ剰鍑犱釜澶勪簬鍚屼竴SSO涓嬬殑webapp錛屼粬浠殑realm-name瑕佽鎴愪竴鏍風(fēng)殑鍊箋?濡傛灉涓嶈鎴愪竴鏍鳳紝閭ｄ箞鎹竴涓獁ebapp灝辮閲嶆柊璁よ瘉涓嬈★紝杈句笉鍒癝SO鐨勬晥鏋溿?br />
濡備綍鍙栧緱褰撳墠鐨刄ser淇℃伅
鍘熸湰閮戒範(fàn)鎯湪login浠ュ悗錛屾妸涓浜沴ogin鐢ㄦ埛淇℃伅鏀懼埌session閲岄潰鐨? 鐜板湪璁よ瘉閮戒氦緇檆ontainer鍘誨仛浜?jiǎn)锛屾垜浠殑webapp鎬庝箞鎷垮埌l(fā)ogin鐢ㄦ埛淇℃伅鍟婏紵 紜疄錛岀幇鍦ㄦ垜浠殑webapp鑳藉仛鐨勶紝鍙湁浠巖equest閲岄潰鎷垮埌l(fā)ogin鐢ㄦ埛鐨剈serid浜?jiǎn)銆?br />
String userid = request.gerRemoteUser();
浠ヤ笂鏄湪涓涓猅omcat Container涓婄殑SSO瀹炵幇.
濡傛灉鏄笉鍚岀殑Container涓婄殑webapp瑕佸仛SSO錛岃繖縐嶆椂鍊欎竴縐嶅彲琛岀殑鏂規(guī)鏄紝鏈鍓嶉潰鏋朵竴涓獁ebserver錛堟瘮濡俛pache錛夛紝鍦╳ebserver榪欏眰鎵挎媴SSO鐨勮璇佷換鍔★紝鍚庨潰鍐呴儴灝卞彲鐢ㄦ寕澶氫釜container浜? 鍏蜂綋閮界敤鍒扮殑鏃跺欏啀璋冩煡鍚с?
]]>
姝ラ錛?br /> 1.涓嬭澆JDBC椹卞姩錛?a >http://dev.mysql.com/downloads/connector/j/錛?br /> 2.瑙ｅ帇緙╁悗錛屽皢mysql-connector-java-5.1.13-bin.jar鎷瘋礉鍒癟omcat_Home/lib涓嬶紱
3.鐧誨綍MySql錛屾墽琛屼笅鍒楄鍙ワ細(xì)
mysql> GRANT ALL PRIVILEGES ON *.* TO javauser@localhost
-> IDENTIFIED BY 'javadude' WITH GRANT OPTION;
mysql> create database javatest;
mysql> use javatest;
mysql> create table testdata (
-> id int not null auto_increment primary key,
-> foo varchar(25),
-> bar int);
娉ㄦ剰錛氭墽琛屽畬嫻嬭瘯鍚庤鍒犻櫎涓婅堪user-javauser錛屼負(fù)浜?jiǎn)瀹夊叏鍚с?br /> 4.寰testdata琛ㄩ噷鎻掑叆涓浜涙祴璇曟暟鎹紱
mysql> insert into testdata values(null, 'hello', 12345);
5.Context閰嶇疆錛?br /> 鍦╯erver.xml閲岀殑Host鍏冪礌涓嬶紝娣誨姞濡備笅Context瀛愬厓绱?br /> <Context path="/DBTest" docBase="DBTest" debug="5" reloadable="true" crossContext="true">
<Resource name="jdbc/TestDB" auth="Container" type="javax.sql.DataSource"
maxActive="100" maxIdle="30" maxWait="10000"
username="javauser" password="javadude" driverClassName="com.mysql.jdbc.Driver"
url="jdbc:mysql://localhost:3306/javatest"/>
</Context>
6.鐜板湪鍦╳ebapps涓嬪垱寤哄瓙鐩綍DBTest錛屽啀鍦―BTest涓嬪垱寤哄瓙鐩綍WEB-INF錛屽湪榪欎笅闈㈠垱寤烘枃浠秝eb.xml錛屽涓?br /> <?xml version="1.0" encoding="ISO-8859-1"?>
<web-app xmlns="http://java.sun.com/xml/ns/j2ee"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd"
version="2.4">
<description>MySQL Test App</description>
<resource-ref>
<description>DB Connection</description>
<res-ref-name>jdbc/TestDB</res-ref-name>
<res-type>javax.sql.DataSource</res-type>
<res-auth>Container</res-auth>
</resource-ref>
</web-app>
7.鍒涘緩綆鍗曠殑test.jsp鍋氭祴璇曠敤錛屾斁鍦―BTest鐩綍涓嬶紱
<%@ taglib uri="http://java.sun.com/jsp/jstl/sql" prefix="sql" %>
<%@ taglib uri="http://java.sun.com/jsp/jstl/core" prefix="c" %>
<sql:query var="rs" dataSource="jdbc/TestDB">
select id, foo, bar from testdata
</sql:query>
<html>
<head>
<title>DB Test</title>
</head>
<body>
<h2>Results</h2>
<c:forEach var="row" items="${rs.rows}">
Foo ${row.foo}<br/>
Bar ${row.bar}<br/>
</c:forEach>
</body>
</html>
8.鍥犱負(fù)jsp閲岀敤鍒頒簡(jiǎn)JSTL鐨剆ql鍜宑ore榪欎袱涓猼aglibs錛屾墍浠ヨ繕瑕佸幓涓嬭澆瀵瑰簲鐨勪袱涓猨ar鏂囦歡錛?br /> 涓嬭澆鍦板潃錛?a >http://jakarta.apache.org/site/downloads/downloads_taglibs-standard.cgi
9.涓嬭澆瀹屾瘯瑙ｅ帇緙╁悗錛屽皢jstl.jar鍜宻tandard.jar鎷瘋礉鍒癟omcat_Home/lib涓嬶紱
10.鏈鍚庯紝搴旂敤紼嬪簭閮ㄧ講鍒癟omcat涓婂悗錛屽惎鍔═omcat錛屽湪嫻忚鍣ㄩ噷杈撳叆錛?br />
http://localhost:8080/DBTest/test.jsp
鎵ц錛岀粨鏋滃涓嬶細(xì)
Results
Foo helloBar 12345
榪欐牱渚垮畬鎴愪簡(jiǎn)鍦═omcat涓嬭繛鎺ySQL DBCP鐨勮繃紼嬨?br />
]]>
<security-constraint>
<login-config>
鐒跺悗鍦╟onf/tomcat-users.xml閲岋紝娣誨姞閫傚綋鐨?lt;role>鍜?lt;user>錛屾渶鍚庨噸鏂板惎鍔═omcat鍗沖彲銆?br />
渚嬪瓙錛?br /> <!-- Define a Security Constraint on this Application -->
<security-constraint>
<web-resource-collection>
<web-resource-name>HTMLManager and Manager command</web-resource-name>
<url-pattern>/jmxproxy/*</url-pattern>
<url-pattern>/html/*</url-pattern>
<url-pattern>/list</url-pattern>
<url-pattern>/expire</url-pattern>
<url-pattern>/sessions</url-pattern>
<url-pattern>/start</url-pattern>
<url-pattern>/stop</url-pattern>
<url-pattern>/install</url-pattern>
<url-pattern>/remove</url-pattern>
<url-pattern>/deploy</url-pattern>
<url-pattern>/undeploy</url-pattern>
<url-pattern>/reload</url-pattern>
<url-pattern>/save</url-pattern>
<url-pattern>/serverinfo</url-pattern>
<url-pattern>/status/*</url-pattern>
<url-pattern>/roles</url-pattern>
<url-pattern>/resources</url-pattern>
<url-pattern>/findleaks</url-pattern>
</web-resource-collection>
<auth-constraint>
<!-- NOTE: This role is not present in the default users file -->
<role-name>manager</role-name>
</auth-constraint>
</security-constraint>
<!-- Define the Login Configuration for this Application -->
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>Tomcat Manager Application</realm-name>
</login-config>
]]>